Intel Data Center GPU Max Series 1100 / 1550: An improper conditions check lets a privileged local user take

Impact

An improper conditions check lets a privileged local user take the accelerator out of service. Low ceiling - denial of service only - but it is one of the very few CVEs that exist against Intel's Ponte Vecchio datacenter GPUs at all, which is itself worth knowing if you are evaluating them.

Who can reach it

Local, privileged. Host root on the node holding the GPU.

What to do

Apply the Intel firmware/driver update for the Max Series. Cost: a GPU firmware update requires a drain and reboot; the driver alone needs a module reload.

References

Related entries

• Intel Data Center GPU Max Series 1100 / 1550: A second improper conditions check in the Max Series allowingCVE-2024-24580 · Intel Data Center GPU Max Series 1100 / 1550Medium
• AMD PCIe link handling (memory buffer bounds): A guest VM can drive the PCIe link into an out-of-bounds conditionCVE-2024-21961 · AMD PCIe link handling (memory buffer bounds)Medium
• OpenStack Swift: S3API does not strip X-Copy-From, allowing cross-tenant object readsCVE-2026-71192 · OpenStack Swift S3API middleware (X-Copy-From header handling with s3_acl=true)Medium
• AMD NBIO register lock bits - MMIO routing configuration: The sibling of the SMN issue: unprotected NBIO lock bits letCVE-2025-61971 · AMD NBIO register lock bits - MMIO routing configurationMedium
• ansible-runner: streamed archive extraction follows symlinks and writes outside the target directoryCVE-2026-103754 · ansible-runner (unstream_dir() in the transmit/worker protocol)Medium
• DMTF libspdm - SPDM Requester timeout handling: A libspdm Requester stores the Responder's CTExponentCVE-2023-32690 · DMTF libspdm - SPDM Requester timeout handlingMedium