Intel oneAPI Level Zero software: An uncontrolled search path in Level Zero lets an authenticated local user get code

Impact

An uncontrolled search path in Level Zero lets an authenticated local user get code loaded at higher privilege. Level Zero is the low-level runtime under oneAPI and under Intel GPU compute generally, so it sits in the same position in an Intel accelerator stack that the CUDA driver API occupies in an NVIDIA one.

Who can reach it

Local, authenticated. A user able to place a file on a path the runtime searches - which on a shared build host is a low bar.

What to do

Update the oneAPI Level Zero package. Cost: package update and job restart; no driver reload or node drain. Audit writable directories on shared build and inference hosts as the standing control.

References