CVE-2025-32091
8.2Intel · Arc B-series GPUs
A flaw in Intel Arc B-series GPU firmware allows a privileged local user to escalate privileges due to incorrect default permissions in the device driver.
Executive summary
A high-severity privilege escalation vulnerability in Intel Arc B-series GPU firmware poses a significant risk to system integrity and confidentiality.
Vulnerability
The vulnerability is caused by incorrect default permissions within the device driver (CWE-276). It requires a local attacker to already possess privileged user access to trigger the escalation.
Business impact
The vulnerability carries a CVSS score of 8.2, reflecting its potential for high impact on system confidentiality, integrity, and availability. Successful exploitation allows a local attacker to bypass existing security controls, potentially leading to unauthorized system-level operations or full compromise of the host machine.
Remediation
Immediate Action: Consult the official Intel security advisory (INTEL-SA-01356) to identify the firmware versions containing the necessary security fixes and apply them immediately.
Proactive Monitoring: Audit system logs for unauthorized changes to administrative accounts or abnormal driver-level activity that may indicate an attempt to exploit local privilege vulnerabilities.
Compensating Controls: Since this requires local access, enforce strict physical and logical access controls to ensure that only authorized personnel have privileged access to affected systems.
Exploitation status
Public Exploit Available: Unknown
Analyst recommendation
Given the high CVSS severity and the potential for total system impact, administrators should prioritize verifying their firmware versions against Intel security guidance. Applying the vendor-provided firmware updates is the only reliable method to remediate this improper permission configuration and prevent potential privilege escalation.