#VU104106 Input validation error in Intel products - CVE-2024-31068

Vulnerability identifier: #VU104106

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-31068

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
12th Generation Intel Core Processors
13th Generation Intel Core Processors
14th Generation Intel Core Processors
4th Generation Intel Xeon Scalable Processors
5th Generation Intel Xeon Scalable processors
Intel Core Ultra processor

Software vendor:
Intel

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper Finite State Machines (FSMs) in Hardware Logic. A local administrator can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Install updates from vendor's website.

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html