CVE-2025-32091

8.2

Intel · Arc B-series GPUs

A flaw in Intel Arc B-series GPU firmware allows a privileged local user to escalate privileges due to incorrect default permissions in the device driver.

Executive summary

A high-severity privilege escalation vulnerability in Intel Arc B-series GPU firmware poses a significant risk to system integrity and confidentiality.

Vulnerability

The vulnerability is caused by incorrect default permissions within the device driver (CWE-276). It requires a local attacker to already possess privileged user access to trigger the escalation.

Business impact

The vulnerability carries a CVSS score of 8.2, reflecting its potential for high impact on system confidentiality, integrity, and availability. Successful exploitation allows a local attacker to bypass existing security controls, potentially leading to unauthorized system-level operations or full compromise of the host machine.

Remediation

Immediate Action: Consult the official Intel security advisory (INTEL-SA-01356) to identify the firmware versions containing the necessary security fixes and apply them immediately.

Proactive Monitoring: Audit system logs for unauthorized changes to administrative accounts or abnormal driver-level activity that may indicate an attempt to exploit local privilege vulnerabilities.

Compensating Controls: Since this requires local access, enforce strict physical and logical access controls to ensure that only authorized personnel have privileged access to affected systems.

Exploitation status

Public Exploit Available: Unknown

Analyst recommendation

Given the high CVSS severity and the potential for total system impact, administrators should prioritize verifying their firmware versions against Intel security guidance. Applying the vendor-provided firmware updates is the only reliable method to remediate this improper permission configuration and prevent potential privilege escalation.

More Intel CVEs

Sources