It seems like the month of August has brought a wave of vulnerabilities with it since Intel has now revealed a new set of vulnerabilities in Arc GPUs.
Intel Arc GPUs & Several CPUs Now Affected By Multiple Vulnerabilities, Company Yet to Issue a Fix
After Intel “Downfall”, the company has shed light on two new vulnerabilities compromising the Arc A770 and Arc A750, two populous cards in the Alchemist lineup. However, Intel mentions that the affected GPUs were only those brought in the October and December 2022 period, which means that the problem is on a much smaller scale than Downfall, which is expected to affect thousands of CPUs.
The discovered vulnerabilities lead to a similar consequence; denial of service (DoS). According to the “Intel Arc Graphics Cards Advisory” released by the company, the security vulnerabilities are in two different forms. The first one, labeled “CVE-2022-41984”, allows a user with rights to enable DoS through local access, meaning that it can lead to disruptions within GPU performance. Intel has assigned a “4.4 Medium” base score for the vulnerability, which means that the severity of the vulnerability isn’t something to overlook.
The second form is labeled “CVE-2022-38973”, which can also lead to information leakage if a consumer experiences “improper access control”. With a base score of “3.3 Low”, we believe this vulnerability doesn’t have large-scale effects but still exists.
If you are an Arc GPU user, who has purchased it within the timeframe mentioned above, you shouldn’t worry since Intel has suggested approaching “Intel product support” in your region. While this move could be to get an initial idea of the vulnerability, it’s best to approach the company anyway. Intel hasn’t done anything to fix the problem yet, but we do hope a fix is in the works, and we will notify you as soon as development occurs.
News Source: Tom’s Hardware
