CVE-2023-28658

Vulnerability

Insecure inherited permissions in some Intel(R) oneMKL software before version 2022.0 [1] may allow an authenticated user to potentially enable escalation of privilege via local access. The exact component and affected versions are described in the vendor advisory [1].

Exploitation

An attacker must have local access and be authenticated on the system where the affected Intel oneMKL software is installed [1]. No user interaction beyond being a local authenticated user is required. The specific attack steps involve leveraging the insecure inheritance of permissions to gain elevated privileges [1].

Impact

Successful exploitation could allow the attacker to gain escalation of privilege [1], meaning they could obtain higher-level access rights on the system than intended. The impact is limited to local access, and the vulnerability does not enable remote exploitation [1].

Mitigation

Intel has addressed the issue in oneMKL version 2022.0 or later [1]. Users should update to the fixed version to mitigate the vulnerability. No workaround is mentioned in the available references [1].