Intel Data Center GPU Flex Series - Windows driver: A further improper access control in the Flex Series Windows driver

Impact

A further improper access control in the Flex Series Windows driver allowing an authenticated local user to cause denial of service.

Who can reach it

Local, authenticated, on a Windows host running the driver before 31.0.101.4314.

What to do

Update to 31.0.101.4314 or later - the same release that fixes CVE-2024-36292, so patch both in one window. Cost: node reboot.

References

Related entries

• Intel Data Center GPU Flex Series - Windows driver: Improper buffer restrictions in the Flex Series Windows driver letCVE-2024-36292 · Intel Data Center GPU Flex Series - Windows driverHigh
• Nx @nx/docker: config-controlled shell injection in release commands executes code in the release jobCVE-2026-104859 · Nx @nx/docker release pipeline (repositoryName / registryUrl shell interpolation)High
• ansible.posix authorized_key: a symlink under a user's ~/.ssh redirects a root chown to any pathCVE-2026-11837 · ansible.posix collection - authorized_key module (keyfile() ownership handling)High
• GitLab EE: developer-role user can run arbitrary commands in CI via attacker-controlled agent configCVE-2026-18252 · GitLab EE CI (Claude agent processing configuration from a user-controlled source)High
• Apache Airflow 3.3.0: Dag author reaches arbitrary imports in the scheduler via next_kwargs deserializationCVE-2026-67260 · Apache Airflow scheduler (awaiting_input sweep, next_kwargs deserialization)High
• Jenkins: session is not rotated on remember-me login, allowing session fixation against any userCVE-2026-84652 · Jenkins core (remember-me authentication, session handling)High