CVE-2020-24485

Name of the Vulnerable Software and Affected Versions: Intel(R) FPGA OPAE Driver for Linux versions prior to 4.17 Intel(R) Trace Analyzer and Collector versions prior to 2020 update 3

Description: The issue is related to improper conditions check and uncontrolled search path, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations: For Intel(R) FPGA OPAE Driver for Linux versions prior to 4.17, update to kernel version 4.17 or later to resolve the issue. For Intel(R) Trace Analyzer and Collector versions prior to 2020 update 3, update to version 2020 update 3 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.