Intel oneAPI Math Kernel Library privilege escalation vulnerability CVE-2024-28950
Intel disclosed a privilege escalation vulnerability (CVE-2024-28950) in oneAPI Math Kernel Library software for Windows that could allow authenticated users with local access to escalate privileges. Intel released version 2024.2 and later to address the issue.
What happened
A potential security vulnerability in Intel oneAPI Math Kernel Library (oneMKL) software for Windows before version 2024.2 allows escalation of privilege via uncontrolled search path for authenticated users with local access and user interaction.
The vulnerability was assigned CVE-2024-28950 with a CVSS Base Score of 6.7 (Medium severity).
Reported impact
An authenticated user with local access could potentially enable escalation of privilege via the uncontrolled search path.
Governance controls
Intel released software updates to version 2024.2 or later for Intel oneMKL and oneAPI Base Toolkit software for Windows to mitigate the vulnerability.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.