Untrusted search path in Intel Integrated Performance Primitives and Intel oneAPI Base Toolkit - CVE-2024-28952

Vulnerability identifier: #VU100422

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-28952

CWE-ID: CWE-426

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to uncontrolled search path. A local user can gain elevated privileges on the target system.

Intel Integrated Performance Primitives
Intel oneAPI Base Toolkit
ThinkPad X1 Carbon 8th Gen - 20UA
ThinkPad X1 Carbon 5th Gen - Skylake 20K3
ThinkPad X1 Carbon 6th Gen - 20KH
ThinkPad X1 Carbon 6th Gen - 20KG
ThinkPad X1 Carbon 7th Gen - 20QD
ThinkPad X1 Carbon 7th Gen - 20QE
ThinkPad X1 Carbon 7th Gen - 20R1
ThinkPad X1 Carbon 7th Gen - 20R2
ThinkPad X1 Carbon 8th Gen - 20U9
ThinkPad X1 Carbon 5th Gen - Skylake 20K4
ThinkPad X1 Extreme 1st Gen 20MF
ThinkPad X1 Extreme 1st Gen 20MG
ThinkPad X1 Extreme 2nd Gen 20QV
ThinkPad X1 Extreme 2nd Gen 20QW
ThinkPad X1 Extreme 3rd Gen 20TK
ThinkPad X1 Extreme 3rd Gen 20TL
ThinkPad X1 Yoga 1st Gen 20FQ
ThinkPad X1 Yoga 1st Gen 20FR
ThinkPad T590 20N4
ThinkPad T490s 20NX
ThinkPad T490s 20NY
ThinkPad T570 20H9
ThinkPad T570 20HA
ThinkPad T570 20JW
ThinkPad T570 20JX
ThinkPad T580 20L9
ThinkPad T580 20LA
ThinkPad X1 Yoga 2nd Gen 20JD
ThinkPad T590 20N5
Type 20JB, 20JC ThinkPad X1 Tablet 2nd Gen
Type 20KJ 20KK ThinkPad X1 Tablet 3rd Gen
ThinkPad X1 Carbon 4th Gen 20FB
ThinkPad X1 Carbon 4th Gen 20FC
ThinkPad X1 Carbon 5th Gen - Kabylake 20HR
ThinkPad X1 Carbon 5th Gen - Kabylake 20HQ
ThinkPad X390 20Q0
ThinkPad X270 20HN
ThinkPad X270 20HM
ThinkPad X270 20K6
ThinkPad X270 20K5
ThinkPad X280 20KF
ThinkPad X280 20KE
ThinkPad X380 Yoga 20LH
ThinkPad X380 Yoga 20LJ
ThinkPad X13 Yoga Gen 1 20SY
ThinkPad X390 20Q1
ThinkPad X390 20SC
ThinkPad X390 20SD
ThinkPad X390 Yoga 20NN
ThinkPad X390 Yoga 20NQ
ThinkPad Yoga 260
ThinkPad Yoga 370
ThinkPad X1 Yoga 4th Gen 20QG
ThinkPad X1 Yoga 2nd Gen 20JE
ThinkPad X1 Yoga 2nd Gen 20JF
ThinkPad X1 Yoga 2nd Gen 20JG
ThinkPad X1 Yoga 3rd Gen 20LD
ThinkPad X1 Yoga 3rd Gen 20LE
ThinkPad X1 Yoga 3rd Gen 20LF
ThinkPad X1 Yoga 3rd Gen 20LG
ThinkPad X1 Yoga 4th Gen 20QF
ThinkPad T490 Type 20Q9, 20QH
ThinkPad X1 Yoga 4th Gen 20SA
ThinkPad X1 Yoga 4th Gen 20SB
ThinkPad X1 Yoga 5th Gen 20UB
ThinkPad X1 Yoga 5th Gen 20UC
ThinkPad X13 20T2
ThinkPad X13 20T3
ThinkPad X13 Yoga Gen 1 20SX
ThinkPad P52 20M9
ThinkPad P51 20HH
ThinkPad P51 20HJ
ThinkPad P51 20MM
ThinkPad P51 20MN
ThinkPad P51s 20HB
ThinkPad P51s 20HC
ThinkPad P51s 20JY
ThinkPad P51s 20K0
ThinkPad P50
ThinkPad P52 20MA
ThinkPad P52s 20LB
ThinkPad P52s 20LC
ThinkPad P53 20QN
ThinkPad P53 20QQ
ThinkPad P53s 20N6
ThinkPad P53s 20N7
ThinkPad P70
ThinkPad P1 Gen 3 20TH
ThinkPad L470 20J4
ThinkPad L470 20J5
ThinkPad L470 20JU
ThinkPad L470 20JV
ThinkPad P1 Gen 1 20MD
ThinkPad P1 Gen 1 20ME
ThinkPad P1 Gen 2 20QT
ThinkPad P1 Gen 2 20QU
Thinkpad P71 20HK
ThinkPad P1 Gen 3 20TJ
ThinkPad P14s Gen 1 20S4
ThinkPad P14s Gen 1 20S5
ThinkPad P15s Gen 1 20T4
ThinkPad P15s Gen 1 20T5
ThinkPad P43s 20RH
ThinkPad P43s 20RJ
ThinkPad T480 20L5
ThinkPad T470 20HE
ThinkPad T470 20JM
ThinkPad T470 20JN
ThinkPad T470p
ThinkPad T470s 20HF
ThinkPad T470s 20HG
ThinkPad T470s 20JS
ThinkPad T470s 20JT
ThinkPad T470 20HD
ThinkPad T480 20L6
ThinkPad T480s 20L7
ThinkPad T480s 20L8
ThinkPad T490 20N2
ThinkPad T490 20N3
ThinkPad T490 20RY
ThinkPad T490 20RX
ThinkPad T14 Gen 1 20S3
Thinkpad P71 20HL
Thinkpad P72 20MB
Thinkpad P72 20MC
Thinkpad P73 20QR
Thinkpad P73 20QS
ThinkPad T14 Gen 1 20S0
ThinkPad T14 Gen 1 20S1
ThinkPad T14 Gen 1 20S2
ThinkPad L460
ThinkPad T14s 20T0
ThinkPad T14s 20T1
ThinkPad T15 20S6
ThinkPad T15 20S7
ThinkPad T460
ThinkPad T460p
ThinkPad T460s
Intel Software Guard Extensions Software and Device for Windows 11 (Version 21H2 and later), 10 (Version 1709 and later) - ThinkPad

Install updates from vendor's website.

Intel Integrated Performance Primitives - update to 2021.12.0
Intel oneAPI Base Toolkit - update to 2024.2.0
Intel Software Guard Extensions Software and Device for Windows 11 (Version 21H2 and later), 10 (Version 1709 and later) - ThinkPad - update to 2.25.100.3

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01140.html

• Privilege escalation in Intel IPP Software
• Lenovo update for Intel Guard Extensions software