Insecure Inherited Permissions in Intel products - CVE-2024-25561

Vulnerability identifier: #VU96034

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-25561

CWE-ID: CWE-277

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insecure inherited permissions, which leads to security restrictions bypass and privilege escalation.

Intel NUC M15 Laptop Kit - LAPBC710
Intel NUC M15 Laptop Kit - LAPBC510
Intel NUC M15 Laptop Kit - LAPRC710
Intel NUC M15 Laptop Kit - LAPRC510
Intel NUC X15 Laptop Kit - LAPAC71G
Intel NUC X15 Laptop Kit - LAPAC71H
Intel NUC X15 Laptop Kit - LAPKC71F
Intel NUC X15 Laptop Kit - LAPKC71E
Intel NUC X15 Laptop Kit - LAPKC51E
Intel Human Interface Device (HID) Event Filter
ThinkPad T14 Gen 3 21AJ
ThinkPad T15p Gen 3 21DA
ThinkPad T15p Gen 2 21A8
ThinkPad T15p Gen 2 21A7
ThinkPad T15g Gen 2 20YT
ThinkPad T15g Gen 2 20YS
ThinkPad T15 Gen 2 20W5
ThinkPad T15 Gen 2 20W4
ThinkPad T15 20S7
ThinkPad T15 20S6
ThinkPad T14s Gen 3 21BS
ThinkPad T14s Gen 3 21BR
ThinkPad T14s Gen 2 20WN
ThinkPad T14s Gen 2 20WM
ThinkPad T14s 20T1
ThinkPad T14s 20T0
ThinkPad T15p Gen 3 21DB
ThinkPad T14 Gen 3 21AH
ThinkPad T14 Gen 2 20W1
ThinkPad T14 Gen 2 20W0
ThinkPad T14 Gen 1 20S3
ThinkPad T14 Gen 1 20S2
ThinkPad T14 Gen 1 20S1
ThinkPad T14 Gen 1 20S0
ThinkPad P17 Gen 2 20YV
ThinkPad P17 Gen 2 20YU
ThinkPad P16s Gen 1 21BU
ThinkPad P16s Gen 1 21BT
ThinkPad P16 Gen 1 21D7
ThinkPad P16 Gen 1 21D6
ThinkPad P15v Gen 3 21D9
ThinkPad X1 Titanium 20QB
ThinkPad X13 Yoga Gen 2 20W9
ThinkPad X13 Yoga Gen 2 20W8
ThinkPad X13 Gen 3 21BQ
ThinkPad X13 Gen 3 21BN
ThinkPad X13 Gen 2 20WL
ThinkPad X13 Gen 2 20WK
ThinkPad X13 20T3
ThinkPad X13 20T2
ThinkPad X1 Yoga 7th Gen 21CE
ThinkPad X1 Yoga 7th Gen 21CD
ThinkPad X1 Yoga 6th Gen 20Y0
ThinkPad X1 Yoga 6th Gen 20XY
ThinkPad X1 Yoga 5th Gen 20UC
ThinkPad X1 Yoga 5th Gen 20UB
ThinkPad P15v Gen 3 21D8
ThinkPad X1 Titanium 20QA
ThinkPad X1 Nano Gen 1 20UQ
ThinkPad X1 Nano Gen 1 20UN
ThinkPad X1 Fold Gen 1 20RL
ThinkPad X1 Fold Gen 1 20RK
ThinkPad X1 Carbon 9th Gen 20XX
ThinkPad X1 Carbon 9th Gen 20XW
ThinkPad X1 Carbon 8th Gen - 20UA
ThinkPad X1 Carbon 8th Gen - 20U9
ThinkPad X1 Carbon 10th Gen 21CC
ThinkPad X1 Carbon 10th Gen 21CB
Type 20KJ 20KK ThinkPad X1 Tablet 3rd Gen
ThinkPad T16 Gen 1 21BW
ThinkPad T16 Gen 1 21BV
IdeaPad Slim 5 16IRL8
ThinkBook 16 G6 IRL
ThinkBook 14 G7 IML
ThinkBook 14 G6 IRL
ThinkBook 14 2-in-1 G4 IML
ThinkBook 13x G4 IMH
Lenovo Slim Pro 9 16IRP8
Lenovo Slim Pro 9 14IRP8
Lenovo Slim 7 Carbon 13IRP8
Lenovo Slim 7 14IRP8
Lenovo Slim 7 14IMH9
K14 G3 IMU
K14 G2 IRU
Lenovo K14 21CT
Lenovo K14 21CS
IdeaPad Slim 5 16IRU9
ThinkBook 16 G7 IML
IdeaPad Slim 5 16IMH9
IdeaPad Slim 5 16IAH8
IdeaPad Slim 5 15IRU9
IdeaPad Slim 5 15IRH9
IdeaPad Slim 5 14IRU9
IdeaPad Slim 5 14IRL8
IdeaPad Slim 5 14IMH9
IdeaPad Slim 5 14IAH8
IdeaPad Pro 5 16IRH8
IdeaPad Pro 5 16IMH9
IdeaPad Pro 5 14IRH8
IdeaPad Pro 5 14IMH9
IdeaPad Duet 5 12IRU8
IdeaPad Duet 3 11IAN8
ThinkPad L15 Gen 2 Type 20X3 20X4
ThinkPad P15v Gen 2 21AA
ThinkPad P15v Gen 2 21A9
ThinkPad P15s Gen 2 20W7
ThinkPad P15s Gen 2 20W6
ThinkPad P15s Gen 1 20T5
ThinkPad P15s Gen 1 20T4
ThinkPad P15 Gen 2 20YR
ThinkPad P15 Gen 2 20YQ
ThinkPad P14s Gen 3 21AL
ThinkPad P14s Gen 3 21AK
ThinkPad P14s Gen 2 20VY
ThinkPad P14s Gen 2 20VX
ThinkPad P14s Gen 1 20S5
ThinkPad P14s Gen 1 20S4
ThinkPad L14 Gen 2 Type 20X1 20X2
Yoga Slim 7 Carbon 13IRP8
Yoga Slim 7 14IMH9
Yoga Slim 6 14IRP8
Yoga Slim 6 14IRH8
Yoga Slim 6 14IAP8
Yoga Pro 9 16IRP8
Yoga Pro 9 14IRP8
Yoga Pro 7 14IRH8
Yoga Pro 7 14IMH9
Yoga Book 9 13IRU8
Yoga Book 9 13IMU9
Yoga 9 2-in-1 14IMH9
Yoga 9 14IRP8
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or Later) - ThinkPad
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or later) - ThinkPad T14 Gen 2, T14s Gen 2, T15 Gen 2, P14s Gen 2, P15s Gen 2, X13 Gen 2
Intel HID Event Filter Driver for Windows 11 (64-bit) - Yoga Book 9 13IRU8
Intel HID Event Filter Driver for Windows 11 (64-bit) - Yoga Pro 9 16IRP8, Lenovo Slim Pro 9 16IRP8
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Slim 6 14IRP8, Lenovo Slim 7 14IRP8
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Slim 6 14IRH8
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Slim 5 14, IdeaPad Slim 5 16
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Duet 5 12IRU8
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Pro 5 16IRH8
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Pro 7 14IRH8
Intel Human Interface Device (HID) Driver for Windows 10 (64-bit) - ThinkBook 14 G6 IRL, ThinkBook 16 G6 IRL, K14 G2 IRU
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - ThinkBook 14 G6 IRL, ThinkBook 16 G6 IRL, Lenovo K14 G2 IRU
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga 9 14IRP8
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Pro 5 14IRH8
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Slim 7 Carbon 13IRP8, Lenovo Slim 7 Carbon 13IRP8
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Pro 9 14IRP8, Lenovo Slim Pro 9 14IRP8
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Slim 7 14IMH9
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Pro 7 14IMH9
Intel HID Event Filter Driver for Windows 11 (64-bit) - ThinkBook 14 2-in-1 G4 IML
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Book 9 13IMU9
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga 9 2-in-1 14IMH9
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - ThinkBook 13x G4 IMH
Intel HID Event Filter Driver for Windows 11 (64-bit) - ThinkBook 14 G7 IML, ThinkBook 16 G7 IML, K14 G3 IMU
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Slim 5 16IMH9, IdeaPad Slim 5 14IMH9
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Pro 5 16IMH9
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Pro 5 14IMH9
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Lenovo Slim 7 14IMH9, Yoga Slim 7 14IMH9
Intel HID Event Filter Driver for Windows 11 (64-bit) - IdeaPad Slim 5 15IRH9, IdeaPad Slim 5 15IRU9
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Slim 5 14IRU9, IdeaPad Slim 5 16IRU9
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Slim 6 14IAP8
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or Later) - ThinkPad
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad X13 Yoga Gen 2 (Type 20W8, 20W9)
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad X1 Titanium Gen 1
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 1903 or Later) - ThinkPad X1 Nano Gen 1
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 2004 or later) - ThinkPad X1 Fold Gen 1 (Type 20RK, 20LK)
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 1903 or Later) - ThinkPad X1 Carbon 9th Gen, X1 Yoga 6th Gen
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or Later) - ThinkPad X1 Carbon Gen 8, X1 Yoga Gen 5
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad X1 Carbon Gen 10, X1 Yoga Gen 7
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later) and 10 (1709 or later) - ThinkPad X1 Tablet Gen 3 (Type 20KJ, 20KK)
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad P15v Gen 3 (Type 21D8 21D9), P16 Gen 1 (Type 21D6, 21D7), T15p Gen 3 (Type 21DA 21DB)
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later) and 10 (Version 1903 or later) - ThinkPad
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or Later) - ThinkPad
Intel HID Event Filter Driver for Windows 10 (Version 2004 or later) - Lenovo K14 Gen 1 (Type 21CS, 21CT)
Intel HID Event Filter Driver for Windows 11 (Version 21H1 or later) - Lenovo K14 Gen 1 (Type 21CS, 21CT)
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 1903 or later) - ThinkPad
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Duet 3 11IAN8

Install updates from vendor's website.

Intel Human Interface Device (HID) Event Filter - update to 2.2.2.1
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or later) - ThinkPad T14 Gen 2, T14s Gen 2, T15 Gen 2, P14s Gen 2, P15s Gen 2, X13 Gen 2 - update to R1JHE07W
Intel HID Event Filter Driver for Windows 11 (64-bit) - Yoga Book 9 13IRU8 - update to 2.2.2.1
Intel HID Event Filter Driver for Windows 11 (64-bit) - Yoga Pro 9 16IRP8, Lenovo Slim Pro 9 16IRP8 - update to 2.2.2.1
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Slim 6 14IRP8, Lenovo Slim 7 14IRP8 - update to 2.2.2.1
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Slim 6 14IRH8 - update to 2.2.2.1
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Slim 5 14, IdeaPad Slim 5 16 - update to 2.2.2.1
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Duet 5 12IRU8 - update to 2.2.2.1
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Pro 5 16IRH8 - update to 2.2.2.3
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Pro 7 14IRH8 - update to 2.2.2.3
Intel Human Interface Device (HID) Driver for Windows 10 (64-bit) - ThinkBook 14 G6 IRL, ThinkBook 16 G6 IRL, K14 G2 IRU - update to 2.2.2.3
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - ThinkBook 14 G6 IRL, ThinkBook 16 G6 IRL, Lenovo K14 G2 IRU - update to 2.2.2.3
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga 9 14IRP8 - update to 2.2.2.3
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Pro 5 14IRH8 - update to 2.2.2.3
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Slim 7 Carbon 13IRP8, Lenovo Slim 7 Carbon 13IRP8 - update to 2.2.2.3
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Pro 9 14IRP8, Lenovo Slim Pro 9 14IRP8 - update to 2.2.2.3
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Slim 7 14IMH9 - update to 2.2.2.5
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Pro 7 14IMH9 - update to 2.2.2.5
Intel HID Event Filter Driver for Windows 11 (64-bit) - ThinkBook 14 2-in-1 G4 IML - update to 2.2.2.5
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Book 9 13IMU9 - update to 2.2.2.5
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga 9 2-in-1 14IMH9 - update to 2.2.2.5
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - ThinkBook 13x G4 IMH - update to 2.2.2.5
Intel HID Event Filter Driver for Windows 11 (64-bit) - ThinkBook 14 G7 IML, ThinkBook 16 G7 IML, K14 G3 IMU - update to 2.2.2.5
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Slim 5 16IMH9, IdeaPad Slim 5 14IMH9 - update to 2.2.2.5
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Pro 5 16IMH9 - update to 2.2.2.5
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Pro 5 14IMH9 - update to 2.2.2.5
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Lenovo Slim 7 14IMH9, Yoga Slim 7 14IMH9 - update to 2.2.2.5
Intel HID Event Filter Driver for Windows 11 (64-bit) - IdeaPad Slim 5 15IRH9, IdeaPad Slim 5 15IRU9 - update to 2.2.2.6
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Slim 5 14IRU9, IdeaPad Slim 5 16IRU9 - update to 2.2.2.6
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - Yoga Slim 6 14IAP8 - update to 2.2.2.6
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or Later) - ThinkPad - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad X13 Yoga Gen 2 (Type 20W8, 20W9) - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad X1 Titanium Gen 1 - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 1903 or Later) - ThinkPad X1 Nano Gen 1 - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 2004 or later) - ThinkPad X1 Fold Gen 1 (Type 20RK, 20LK) - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 1903 or Later) - ThinkPad X1 Carbon 9th Gen, X1 Yoga 6th Gen - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or Later) - ThinkPad X1 Carbon Gen 8, X1 Yoga Gen 5 - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad X1 Carbon Gen 10, X1 Yoga Gen 7 - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later) and 10 (1709 or later) - ThinkPad X1 Tablet Gen 3 (Type 20KJ, 20KK) - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad P15v Gen 3 (Type 21D8 21D9), P16 Gen 1 (Type 21D6, 21D7), T15p Gen 3 (Type 21DA 21DB) - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later) and 10 (Version 1903 or later) - ThinkPad - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or Later) - ThinkPad - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 10 (Version 2004 or later) - Lenovo K14 Gen 1 (Type 21CS, 21CT) - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H1 or later) - Lenovo K14 Gen 1 (Type 21CS, 21CT) - update to 2.2.2.9
Intel HID Event Filter Driver for Windows 11 (Version 21H2 or later), 10 (Version 1903 or later) - ThinkPad - update to 2.2.2.9
Intel Human Interface Device (HID) Driver for Windows 11 (64-bit) - IdeaPad Duet 3 11IAN8 - update to 2.2.2.9

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01089.html

• Privilege escalation in Intel HID Event Filter Software
• Lenovo update for Intel HID Event Filter Software Installer