GPU VulnDB

Database/Firmware, BMC & network fabric

Intel processors - power management throttling: The Intel half of Hertzbleed: observable behaviour in power-management

CVE-2022-24436Firmware, BMC & network fabricHertzbleed (Intel)INTEL-SA-00698curated

Impact

The Intel half of Hertzbleed: observable behaviour in power-management throttling lets an authenticated user infer processed data over a network path. Same operator exposure as the AMD variant - host-side cryptography on your GPU nodes and control plane, not GPU memory.

Who can reach it

Authenticated user, remotely exploitable via timing of network-facing crypto operations. No co-tenancy required.

What to do

Intel likewise did not ship a microcode fix. Mitigation is constant-time cryptographic software, or disabling Turbo Boost / SpeedStep which costs substantial throughput on a GPU host that is already CPU-bound in the data loader. Treat as UNPATCHABLE in hardware; patch the crypto libraries instead.

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.