CVE-2024-28030

What it actually does

NULL pointer dereference in Intel VPL software causes a crash when triggered by a local authenticated user, resulting in denial of service.

Why it matters to the business

Local users on affected systems can cause temporary service outages or application restarts with low effort, though widespread impact is unlikely given the low severity and local access requirement.

How an attack unfolds

An attacker with local authenticated access invokes a code path in vulnerable Intel VPL software that dereferences a NULL pointer, crashing the process or service.

How to fix it

Update affected SUSE livepatch packages to the fixed versions: kernel-livepatch-SLE15-SP4_Update_13 to 5-150400.2.1 or kernel-livepatch-SLE15-SP5_Update_1 to 4-150500.2.1. Ensure underlying Intel VPL software is upgraded to version 24.1.4 or later where applicable.

How to confirm the fix worked

Verify package versions match or exceed the fixed releases using system package management tools and confirm the Intel VPL component reports version 24.1.4 or newer.

Typical attack path

1. Obtain local authenticated access to a system with vulnerable Intel VPL software installed
2. Trigger the affected code path through normal application usage or crafted input
3. Cause process or service termination due to the NULL pointer dereference

How to detect it

Examine local authentication logs and application crash reports on systems running the affected packages for unexpected terminations of processes linked to Intel VPL after the publication date.

What your security team should do

• Prioritize patching systems with the listed livepatch packages to the specified fixed versions
• Review local access controls to limit who can interact with Intel VPL-dependent applications
• Monitor for any future EPSS increases or exploit maturity changes given the stable low score