Intel® Math Kernel Library Insecure File Permission Local Privilege Escalation

Summary:

The Intel® Math Kernel Library (Intel® MKL) is a library of highly optimized, extensively threaded math routines for science, engineering, and financial applications that require maximum performance. An updated version of the software is available for Intel® MKL users to mitigate this vulnerability.

Description:

The vulnerability in the software could allow an authenticated attacker to gain elevated privilege. Intel has released a software update to the Intel® MKL users to resolve this issue.

This issue only affects the systems with Intel® MKL development environment installed and the issue does not affect applications developed using the libraries from Intel® MKL.

Affected products:

Intel® MKL 10.2 update 1 and prior versions are affected by this issue.

Recommendations:

Affected Intel® MKL users are recommended to:

1. Uninstall Intel® MKL instances prior to version 10.2 update 1

2. Install Intel® MKL 10.2 update 2 or later

Updated Intel® MKL is available at <http://software.intel.com/en-us/intel-mkl/&gt;. If you are unable to upgrade or would like more information, please contact Intel Support (http://premier.intel.com).

Acknowledgements:

Intel would like to thank Leif Nixon for working with us.