Intel Neural Compressor (TOCTOU): A time-of-check/time-of-use race in Neural Compressor lets an authenticated local

Impact

A time-of-check/time-of-use race in Neural Compressor lets an authenticated local user win a window and read information they should not. Low severity on its own; useful as a step in a chain on a shared optimisation node.

Who can reach it

Authenticated local user on the node running Neural Compressor.

What to do

Upgrade to 2.5.0 or later. Package update, service restart.

References