What is CVE-2023-22840?

CVE-2023-22840 is a low-severity vulnerability in Intel Onevpl_gpu_runtime, classified under CWE-86. CVSS score: 3.3/10. Published 2023-08-11.

How severe is CVE-2023-22840?

Low severity. CVSS v3 base score is 3.3 out of 10.

Vulnerability in Intel Onevpl_gpu_runtime

CVE-2023-22840

Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access.

EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

Intel Onevpl_gpu_runtime
Fedoraproject Fedora — versions 37, 38, 39
N/a Intel(r) Onevpl Gpu Software — versions before version 22.6.5

Weakness classification (CWE)

CWE-86

References

secure@intel.com (Vendor Advisory)
secure@intel.com (Mailing List, Third Party Advisory)
secure@intel.com (Third Party Advisory, Issue Tracking)
secure@intel.com (Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2023-22840?: CVE-2023-22840 is a low-severity vulnerability in Intel Onevpl_gpu_runtime, classified under CWE-86. CVSS score: 3.3/10. Published 2023-08-11.
How severe is CVE-2023-22840?: Low severity. CVSS v3 base score is 3.3 out of 10.