CVE-2022-21229

Vulnerability

The vulnerability is an improper buffer restriction in certain Intel NUC 9 Extreme Laptop Kit drivers prior to version 2.2.0.22. This flaw exists in the driver's handling of buffer operations, potentially allowing memory corruption. An authenticated user with local access can exploit this to escalate privileges.

Exploitation

An attacker must have local access to the system and be authenticated. The exploitation involves sending specially crafted input to the vulnerable driver, triggering the buffer restriction flaw. No user interaction beyond authentication is required.

Impact

Successful exploitation allows the attacker to escalate privileges, potentially gaining elevated system access. This could lead to full compromise of the affected device, including arbitrary code execution at a higher privilege level.

Mitigation

Intel has released driver version 2.2.0.22 to address this issue, as detailed in Intel advisory INTEL-SA-00809 [1]. Users should update to the latest driver version. No workaround is provided. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.