SB2025081887 - Multiple vulnerabilities in Intel Graphics Software

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Incorrect default permissions (CVE-ID: CVE-2025-20023)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions. A local user can gain elevated privileges on the target system.

2) Untrusted search path (CVE-ID: CVE-2025-27717)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to usage of an untrusted search path. A local user can gain elevated privileges on the target system.

3) NULL pointer dereference (CVE-ID: CVE-2025-24515)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A local user can trigger denial of service conditions via local access.

4) Protection Mechanism Failure (CVE-ID: CVE-2025-24835)

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to insufficient implementation of security measures. A local user can perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01299.html