Description
Improper input validation in the API for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of service via local access.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.html
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20200320-0005/
Scores
CVSS v3
5.5
EPSS
0.0016
EPSS Percentile
36.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-20
Status
published
Products (5)
intel/graphics_driver
< 26.20.100.7209
netapp/cloud_backup
netapp/data_availability_services
netapp/solidfire_baseboard_management_controller_firmware
netapp/steelstore_cloud_integrated_storage
Published
Nov 14, 2019
Tracked Since
Feb 18, 2026