CVE-2023-26591

Vulnerability

An unchecked return value vulnerability exists in Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88. The flaw occurs in the driver's handling of return values from certain operations, potentially allowing a denial-of-service condition. Affected versions include all driver releases prior to version 88.

Exploitation

An unauthenticated attacker with physical access to the system can exploit this vulnerability. By connecting a malicious Thunderbolt device or manipulating Thunderbolt connections, the attacker can trigger the unchecked return value, leading to system instability or crash. No user interaction or special privileges are required.

Impact

Successful exploitation leads to a denial of service, causing the system to become unresponsive or crash. The attacker does not gain code execution or data access; the primary impact is availability compromise.

Mitigation

Intel has released driver version 88 to address this issue. Users should update to version 88 or later via the Intel Driver & Support Assistant or Windows Update. The advisory is available at the referenced Intel security center [1]. No other workarounds are provided.