Database/Control plane, storage & DevOps

Intel Data Center GPU Max Series 1100 / 1550: A second improper conditions check in the Max Series allowing

CVSS 6.5CVE-2024-24580Control plane, storage & DevOpscurated

Impact

A second improper conditions check in the Max Series allowing a privileged local user to cause denial of service on the accelerator.

Who can reach it

Local, privileged. Host root on the node.

What to do

Apply the Intel update for the Max Series. Cost: driver reload, or drain and reboot if the fix is in firmware.

References

https://www.intel.com/content/www/us/en/security-center/default.html https://nvd.nist.gov/vuln/detail/CVE-2024-24580

Related entries

Intel Data Center GPU Max Series 1100 / 1550: An improper conditions check lets a privileged local user takeCVE-2023-47165 · Intel Data Center GPU Max Series 1100 / 1550Medium
Apache Kafka (client): ConfigProvider plugins let an untrusted app read files/env of the Kafka client hostCVE-2024-31141 · Apache Kafka (client)Medium
Intel Distribution of OpenVINO Model Server: An unauthenticated user can reach an input-validation flaw in OpenVINOCVE-2024-32048 · Intel Distribution of OpenVINO Model ServerMedium
GitLab EE: crafted SCIM provisioning input triggers an unbounded loop and takes the instance downCVE-2025-10903 · GitLab EE (SCIM user provisioning)Medium
rpc.mountd: NFSv3 client bypasses export restrictions and root_squash on subdirectoriesCVE-2025-12801 · nfs-utils rpc.mountd (NFSv3 export subtree access)Medium
OpenVINO Model Server: An unauthenticated request can drive OpenVINO Model Server into unbounded resource consumptionCVE-2025-22892 · OpenVINO Model ServerMedium

All Control plane, storage & DevOps entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.