CVE-2024-45333

7.3 HIGH

📋 TL;DR

An improper access control vulnerability in Intel Data Center GPU Flex Series drivers for Windows allows authenticated local users to potentially cause denial of service. This affects systems running vulnerable GPU drivers before patching. Only Windows systems with these specific Intel GPUs are impacted.

💻 Affected Systems

Products:
  • Intel Data Center GPU Flex Series
Versions: All versions before 31.0.101.4314
Operating Systems: Windows
Default Config Vulnerable: ⚠️ Yes
Notes: Only affects Windows driver for specific Intel Data Center GPUs. Requires local authenticated access.

⚠️ Manual Verification Required

This CVE does not have specific version information in our database, so automatic vulnerability detection cannot determine if your system is affected.

Why? The CVE database entry doesn't specify which versions are vulnerable (no version ranges provided by the vendor/NVD).

🔒 Custom verification scripts are available for registered users. Sign up free to download automated test scripts.

Recommended Actions:
  1. Review the CVE details at NVD
  2. Check vendor security advisories for your specific version
  3. Test if the vulnerability is exploitable in your environment
  4. Consider updating to the latest version as a precaution

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system instability or crash requiring reboot, potentially disrupting GPU-dependent workloads and services.

🟠

Likely Case

Local authenticated user causes GPU driver instability or crash, affecting GPU functionality until driver restart.

🟢

If Mitigated

Minimal impact with proper access controls and patched drivers.

🌐 Internet-Facing: LOW - Requires local authenticated access, not remotely exploitable.
🏢 Internal Only: MEDIUM - Local authenticated users could disrupt GPU workloads on affected systems.

🎯 Exploit Status

Public PoC: ✅ No
Weaponized: UNKNOWN
Unauthenticated Exploit: ✅ No
Complexity: MEDIUM

Requires local authenticated access. No public exploit details available.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: 31.0.101.4314 or later

Vendor Advisory: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html

Restart Required: Yes

Instructions:

1. Download updated driver from Intel website. 2. Run installer. 3. Reboot system. 4. Verify driver version post-install.

🔧 Temporary Workarounds

Restrict local access

windows

Limit local user access to systems with vulnerable GPU drivers

🧯 If You Can't Patch

  • Implement strict access controls to limit local authenticated users
  • Monitor systems for unusual GPU driver crashes or instability

🔍 How to Verify

Check if Vulnerable:

Check GPU driver version in Device Manager > Display adapters > Intel Data Center GPU Flex Series > Driver tab

Check Version:

wmic path win32_pnpsigneddriver where "DeviceName like '%Intel Data Center GPU Flex%'" get DriverVersion

Verify Fix Applied:

Confirm driver version is 31.0.101.4314 or higher in Device Manager

📡 Detection & Monitoring

Log Indicators:

  • GPU driver crashes in Windows Event Logs
  • System instability events related to display drivers

SIEM Query:

EventID=1001 AND Source="Windows Error Reporting" AND Description contains "igfx" OR "GPU"

🔗 References

📤 Share & Export