CVE-2024-28051

What it actually does

Out-of-bounds read in Intel VPL software allowing an authenticated local user to disclose limited memory contents.

Why it matters to the business

Low-risk potential exposure of sensitive data on systems running affected Intel video processing libraries; widespread kernel package updates required across many Ubuntu LTS deployments increase maintenance overhead.

How an attack unfolds

An authenticated local attacker supplies specially crafted input to the vulnerable VPL component, triggering an out-of-bounds memory read that leaks limited information without requiring elevated privileges beyond local access.

How to fix it

Update affected Ubuntu packages to the listed fixed versions: linux-aws-5.15 to 5.15.0-1014.18~20.04.1, linux-azure-5.15 to 5.15.0-1007.8~20.04.1, linux-azure-fde-5.15 to 5.15.0-1019.24~20.04.1.1, linux-gcp-5.15 to 5.15.0-1006.9~20.04.1, linux-gkeop-5.15 to 5.15.0-1003.5~20.04.2, linux-hwe-5.15 to 5.15.0-33.34~20.04.1, linux-ibm-5.15 to 5.15.0-1033.36~20.04.1, linux-intel-iotg-5.15 to 5.15.0-1003.5~20.04.1, linux-lowlatency-hwe-5.15 to 5.15.0-33.34~20.04.1, linux-oracle-5.15 to 5.15.0-1007.9~20.04.1, linux-riscv-5.15 to 5.15.0-1015.17~20.04.1, linux to 5.15.0-22.22, linux-aws to 5.15.0-1002.4, linux-aws-6.5 to 6.5.0-1008.8~22.04.1, linux-azure to 5.15.0-1001.2, linux-azure-6.5 to 6.5.0-1007.7~22.04.1, linux-azure-fde to 5.15.0-1019.24.1, linux-gcp to 5.15.0-1001.3, linux-gcp-6.5 to 6.5.0-1010.10~22.04.3. Apply vendor kernel updates promptly.

How to confirm the fix worked

Verify installed package versions match or exceed the fixed releases listed above; confirm Intel VPL software reports version 24.1.4 or later; retest the component with boundary-checking inputs to ensure no out-of-bounds reads occur.

Typical attack path

1. Obtain local authenticated access to a system with vulnerable Intel VPL software
2. Craft and submit malicious input designed to trigger the out-of-bounds read condition
3. Observe or capture the limited memory contents disclosed by the flaw

How to detect it

Review local process execution logs and memory access patterns around Intel VPL components for unusual read operations; no remote indicators expected due to local attack vector.

What your security team should do

• Prioritize kernel package upgrades on all listed Ubuntu 20.04 and 22.04 LTS systems within standard change windows
• Inventory systems using Intel VPL or media processing workloads to confirm exposure scope
• Monitor vendor advisories for any follow-on Intel VPL library updates beyond the kernel fixes