CVE-2023-22840

Low

Description

Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access.

SeverityLow
CVSS3.3
Exploit probability—
ProductIntel Onevpl Gpu Runtime
PublishedAug 11, 2023
First seenAug 11, 2023
Weakness typeCWE-86CWE-86

How to fix

Update
  • intel onevpl_gpu_runtime22.6.5 or later

Affected products

ProductAffected versionsFixed in
intel onevpl_gpu_runtimev < 22.6.522.6.5
fedoraproject fedora37, 38, 39—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.