Intel fixes security vulnerabilities Linux and Windows driver

Intel has released security vulnerabilities affecting its products six reports , including Intel graphics processors on Windows and Linux.

In the six security holes, only one has a "high" severity rating. Four of which were rated "medium", and the last one was rated "low."

High severity vulnerabilities that exist in Windows privilege elevation Intel VTune Amplifier, Intel said the vulnerability is found within the company's employees.

To resolve this defect, the user must be a Windows-Intel VTune Amplifier updated to version 8 or later.

Intel said: "Before 8 update, visit Windows VTune Amplifier for Windows driver control incorrectly, you may cause elevation of privilege through an authenticated user potentially enabled through local access."

Windows and Linux patches

Since the information found in Intel's processor graphics driver leakage vulnerabilities, Windows and Linux will be exposed.

"For some Intel Intel (R) graphics processor (R) processor, the control flow in some data structure is insufficient, may allow unauthenticated users to achieve information disclosure through local access." Intel wrote for CVE-2019-14615 security bulletin.

3rd to 10th-generation Intel Core processors, Intel Xeon processor E3 v2 to v6 series, E-2100 and 2-2200 and Intel Atom processor A, E, X and Z series and many Celeron models are subject to the vulnerability Impact.

Intel said the processor and Windows users must i915 Linux driver update to the latest version. However, the company warned that some chip Windows is still unable to complete remission.

Based on Ivy Bridge, Bay Trail and Haswell platform Windows operating system is not a complete remission. Update these platforms according to the following recommendation drivers will significantly reduce the potential attack surface. Intel is committed to providing comprehensive mitigation measures for these platforms, once these measures have been validated, it will be put into use. Provided for these platforms will ease the Linux mainline kernel, "Intel said.

Intel said the vulnerability was first found internally, but many third-party researchers also contributed to this report.

Guess you like

Origin www.linuxidc.com/Linux/2020-01/162038.htm