CVE-2023-22840

MEDIUM 5.5CVE-2023-22840 · Published 11/08/2023 · updated 17/06/2026

In short

CVE-2023-22840 is a MEDIUM (CVSS 5.5) vulnerability affecting onevpl gpu runtime (intel).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.8% of all vulnerabilities.
Fix: update to 22.6.5 or later.

Package	Affected versions	Patched versions
onevpl gpu runtime intel	`< 22.6.5`	`22.6.5`

Description

Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00818.html · Vendor Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/J7RNFPWOSFII2JE2KDRHPLJANZC3YATW · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/L27GRS7E45IOCZ44VQX2NJ33GVRBWHBS · Issue Tracking
lists.fedoraproject.org/archives/list/[email protected]/message/TULYSWHC3X76AIGGMUSLBTWOXNND6IEV · Issue Tracking

More vulnerabilities in onevpl gpu runtime

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free