Intel Data Center GPU Max Series 1100 / 1550: An improper conditions check lets a privileged local user take

Impact

An improper conditions check lets a privileged local user take the accelerator out of service. Low ceiling - denial of service only - but it is one of the very few CVEs that exist against Intel's Ponte Vecchio datacenter GPUs at all, which is itself worth knowing if you are evaluating them.

Who can reach it

Local, privileged. Host root on the node holding the GPU.

What to do

Apply the Intel firmware/driver update for the Max Series. Cost: a GPU firmware update requires a drain and reboot; the driver alone needs a module reload.

References