CVE-2024-36488

Vulnerability

An improper access control vulnerability exists in Intel(R) DSA (Dynamic Application Loader) before version 24.3.26.8. This flaw allows an authenticated user to exploit local access to gain elevated privileges. The issue is present in all versions prior to the fixed release [1].

Exploitation

An attacker must have authenticated access to the local system. No additional privileges or user interaction beyond local authentication are required. The attacker can leverage the improper access control to execute operations that should be restricted to higher-privileged users [1].

Impact

Successful exploitation leads to escalation of privilege, potentially allowing the attacker to gain administrative or system-level control over the affected machine. This compromises the confidentiality, integrity, and availability of the system [1].

Mitigation

Intel has released version 24.3.26.8 to address this vulnerability. Users should update to this version or later. No workarounds are mentioned in the advisory. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities (KEV) as of the publication date [1].