Intel reports wave of high-severity GPU vulnerabilities — ten unique security vulnerabilities stemming from poor software hit range of graphics solutions
Everyone with any Intel graphics solution should be sure to update their drivers this week—the tech giant just announced ten new security vulnerabilities affecting a wide range of its GPU drivers and software. Nearly every Intel GPU or integrated graphics going back to the 6th generation of Core processors is affected by one or more of these vulnerabilities, which can be addressed by updating to the latest Intel graphics drivers.
The laundry list of vulnerabilities coming from Team Blue all require local access to take advantage of, greatly downgrading their importance to the average user. As the saying goes, if a hostile attacker has local access to your system, you have bigger things to worry about than side-channel attacks. But a group of vulnerabilities affecting Intel's entire graphics operation, going back to Skylake CPUs, is no laughing matter.
"Improper access control" for graphics software and drivers is the most serious repeat offender on the list. The vulnerabilities allow for escalation of privilege, denial of service, and information disclosure attacks. The integrated graphics software of every consumer CPU release since 6th-gen Intel Core, all Iris Xe and Arc GPUs, and Intel Data Center GPU Flex 140/170 GPUs are affected by one or more vulnerabilities and should be updated to the most recent drivers. Every user using drivers released after October 2024 is already protected from the vulnerabilities.
This great wave of security holes immediately follows another Intel security event. Earlier this week, researchers at ETH Zurich found a new way around Intel's fixes for the data-leaking Spectre v2 vulnerability, prompting its own round of advisories and fixes from Team Blue. Intel's CPU architecture is consistently plagued by side-channel and branch prediction attacks like Spectre, with its hardware and software fixes prone to being maneuvered around.
The CPU vulnerability discovered by Zurich also affected a wide swath of Intel CPUs, though the attack also requires local access and, according to Intel, has no real-world applications yet discovered. Intel advises anyone with an affected CPU to consult their system manufacturer for BIOS or microcode updates.
Intel's software weaknesses seem like a perennial issue for the tech giant, yet another problem weighing on the company in danger. Intel recently announced that its Intel Foundry program is not expected to break even until 2027, another issue for the company which has had multiple waves of layoffs this year. Intel's future is uncertain, making its proclivity for security flaws and vulnerabilities all the more serious.
Follow Tom's Hardware on Google News to get our up-to-date news, analysis, and reviews in your feeds. Make sure to click the Follow button.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
15 minutes ago
- Yahoo
Three senior execs to retire from Intel Foundry, including respected semiconductor veteran Gary Patton
When you buy through links on our articles, Future and its syndication partners may earn a commission. Intel on Friday informed its staff that three high-ranking executives from its manufacturing arm, Intel Foundry, are set to retire, Reuters reports. The exit of three corporate vice presidents will have a significant impact on the internal structure of Intel Foundry. Two of the three senior executives, Kaizad Mistry and Ryan Russell, are corporate vice presidents in the Technology Development Group. The third is Gary Patton, who served as the CVP and GM of the Design Technology Platform organization in the Technology Development Group. Patton is a well-known and respected semiconductor industry veteran, having served at IBM and GlobalFoundries. Kaizad Mistry and Ryan Russell have been part of the technical leadership behind Intel's process technology development and were responsible for various aspects of the Technology Development Group, including overseeing the ongoing efforts and setting strategic goals. Starting late 2024, Garry Patton was promoted to lead all of Intel Foundry's design enablement engineering efforts. As CVP and GM of the newly created Design Technology Platform organization, he was responsible for delivering the full set of design platform solutions required by Intel's Foundry customers. Essentially, he was responsible for developing process design kits (PDKs), validating support for EDA tools, creating IP libraries, and establishing design rules. Fundamentally, his job was to ensure that customer designs developed using Intel's PDKs, EDA tools (well, these came from third parties), and IP were compatible with Intel's process technologies and met performance and power goals, and could be reliably manufactured at high yield. Patton joined Intel after five years at GlobalFoundries and 20 years at IBM Microelectronics. These leadership exits coincide with an internal restructuring of Intel's Technology Development Group, which started earlier this year. Dr. Ann Kelleher, Intel's Executive Vice President overseeing fabrication technology development since 2020, will retire later in 2025 after more than 30 years at the company. She will remain as a strategic adviser during the transition, but her responsibilities will be divided. Naga Chandrasekaran will lead front-end process development and manufacturing as Head of Technology and Operations at Intel Foundry, while Navid Shahriari will oversee back-end operations, including assembly, testing, and advanced packaging. Naga Chandrasekaran, a former Micron executive, has been leading Intel's manufacturing and supply chain organization since mid-2024. His promotion integrates process R&D and high-volume production under one leadership to improve yield, ramp time, and process consistency. Navid Shahriari, also EVP now, will be in charge of Intel's advanced packaging strategy, pushing forward chiplet integration and test technologies. Kelleher, who rebuilt Intel's Technology Development group to meet the ambitious '5 nodes in 4 years' (5N4Y) roadmap under chief executive Pat Gelsinger, leaves after laying the foundation for Intel's 18A, 14A, and post-14A process technologies, which will drive Intel's manufacturing leadership in the coming years. She will continue to advise Intel on foundry technologies, U.S. and European fab capacity, and other production-related issues. It remains to be seen whether her advice will be needed or followed. Last week, the company announced that it would put its European projects in Germany and Poland on hold and slow down expansion of production capacity in the U.S. In addition, the company indicated that it may slow down development of its 14A fabrication process or completely abandon it if it cannot secure at least one major external customer for this production node, as high capital requirements necessitate strong return prospects. The departures come as Intel implements a major cost-cutting plan, aiming to reduce its global workforce by 15%. The company expects to close the year with approximately 75,000 employees worldwide, which means that the company will have fired 30,000 people in 2025. Follow Tom's Hardware on Google News to get our up-to-date news, analysis, and reviews in your feeds. Make sure to click the Follow button. Error in retrieving data Sign in to access your portfolio Error in retrieving data Error in retrieving data Error in retrieving data Error in retrieving data
Yahoo
30 minutes ago
- Yahoo
After admitting it kind of forgot about duos, FromSoft finally adds a 2-player mode to Elden Ring Nightreign and adjusts balance based on number of players
When you buy through links on our articles, Future and its syndication partners may earn a commission. After countless requests and a mixed reception at launch, Elden Ring Nightreign has finally made good on its promise of adding a two-player duos mode to the game. Developer FromSoftware dropped a new update, patch 1.02, earlier today, introducing what is by far the co-op hit's most-requested feature. Nightreign's patch notes explain that you can now begin expeditions with two people, so you might notice the 'Expedition Type' setting has now been replaced with a 'Number of Players' button when you set up a game. FromSoft previously admitted that it kinda forgot about duos while in production, which means the final game was almost entirely balanced around and mainly dependant on three people journeying around The Lands Between in Elden Ring Nightreign multiplayer. Don't worry about Nightreign becoming substantially harder with just two people, though. "The game balance will be adjusted to the current number of players," the patch notes say. Of course, an Elden Ring Nightreign solo mode with downscaled difficulty has been available from the start and you could technically play with two people if one player happened to run away from a three-player game. The community's favorite "Seamless Co-Op" modder also managed to get duos working in mere hours after launch. Not having to jump through extra hoops if you want a date night or only have one friend sick enough to endure those bosses is very handy, though. Elsewhere in the patch notes, the studio details various bug fixes and quality-of-life improvements, as well as a new Relic filtering option "to allow a more precise selection of Relic effects." FromSoftware had one big problem turning an old Dark Souls 3 boss into an Elden Ring Nightreign boss, and apparently it solved it by yeeting him into the sky
Yahoo
40 minutes ago
- Yahoo
Intel (INTC) Plans to Separate Networking and Communications Unit Into Stand-alone Company, Highlights Reuters
Intel Corporation (NASDAQ:INTC) is one of the Best Semiconductor Stocks to Buy Under $20. On July 25, Reuters reported that the company plans to separate its networking and communications unit into a stand-alone company and has initiated the process of identifying investors, with the new CEO focusing on streamlining its operations. The Chief Executive's plan emphasises shedding non-core assets and decreasing expenses by scaling back significant investments and reducing the workforce numbers. Elsewhere, Bloomberg reported that Ericsson AB is in talks to invest millions of dollars in Intel Corporation (NASDAQ:INTC)'s networking infrastructure business. A technician soldering components for a semiconductor board. This investment will result in Ericsson being a minority stakeholder in the newly spun-off networking and edge business, known as NEX, which has supplied chips to Ericsson for the radio access network hardware, reported Bloomberg. Intel Corporation (NASDAQ:INTC) is focused on strengthening its core product portfolio and the AI roadmap. Overall, the company sees opportunities to enhance its competitive position and improve profitability. Intel Corporation (NASDAQ:INTC) has been making progress to simplify business, improve efficiency, and enhance execution. Such efforts are focused on reducing expenses, strengthening the balance sheet, optimizing the global footprint, along with concentrating resources on very important growth areas. Intel Corporation (NASDAQ:INTC) remains on track to achieve $17 billion non-GAAP operating expense target for FY 2025. While we acknowledge the potential of INTC as an investment, we believe certain AI stocks offer greater upside potential and carry less downside risk. If you're looking for an extremely undervalued AI stock that also stands to benefit significantly from Trump-era tariffs and the onshoring trend, see our free report on the best short-term AI stock. READ NEXT: 13 Cheap AI Stocks to Buy According to Analysts and 11 Unstoppable Growth Stocks to Invest in Now Disclosure: None. This article is originally published at Insider Monkey.
