Intel oneAPI Level Zero software: An uncontrolled search path in Level Zero lets an authenticated local user get code

Impact

An uncontrolled search path in Level Zero lets an authenticated local user get code loaded at higher privilege. Level Zero is the low-level runtime under oneAPI and under Intel GPU compute generally, so it sits in the same position in an Intel accelerator stack that the CUDA driver API occupies in an NVIDIA one.

Who can reach it

Local, authenticated. A user able to place a file on a path the runtime searches - which on a shared build host is a low bar.

What to do

Update the oneAPI Level Zero package. Cost: package update and job restart; no driver reload or node drain. Audit writable directories on shared build and inference hosts as the standing control.

References

Related entries

• Intel oneAPI DPC++/C++ compiler: An uncontrolled library search path: the component loads a shared library by nameCVE-2024-47795 · Intel oneAPI DPC++/C++ compilerMedium
• Intel oneAPI toolkit and component installers: An uncontrolled library search path: the component loads a sharedCVE-2025-20017 · Intel oneAPI toolkit and component installersMedium
• Intel oneAPI DPC++/C++ compiler installer: The compiler installer sets permissions that let a local user modifyCVE-2025-20087 · Intel oneAPI DPC++/C++ compiler installerMedium
• Intel oneAPI DPC++/C++ compiler: An uncontrolled library search path: the component loads a shared library by nameCVE-2025-20627 · Intel oneAPI DPC++/C++ compilerMedium
• Intel E810 NVM Update Utility: Insecure inherited permissions in the NVM update utilityCVE-2025-20629 · Intel E810 NVM Update UtilityMedium
• Dell CloudLink (privilege escalation to database): A privileged user escalates laterally or reads the CloudLinkCVE-2025-46366 · Dell CloudLink (privilege escalation to database)Medium