Cyber Risks · Cisco Talos

Vulnerability Spotlight: Denial-of-service vulnerability in Intel IGC64 graphics driver

Summary: Cisco Talos's Piotr Bania found a denial-of-service vulnerability in Intel's IGC64.dll graphics driver, affecting versions 26.20.100.6709 and 26.20.100.6861. A malformed pixel shader triggers an out-of-bounds memory read that can be launched from VMware guest usermode and affect the VMware host, and Cisco Talos worked with Intel to resolve the issue and release an update.

Key Takeaway: The trigger runs in a VMware guest but reaches the host, so a workload you treat as contained can take down the machine it sits on - and the fix is a driver update that has to land on every affected endpoint.

Read the original at Cisco Talos ↗

Topics
Cloud Security
Related