CVE-2025-31948: Input Validation
Improper input validation for some Intel(R) oneAPI Math Kernel Library before version 2025.2 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Intel(R) oneAPI Math Kernel Libraryto a version that resolves this vulnerability.Fixed in 2025.2
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31948?
CVE-2025-31948 is classified as a denial of service vulnerability due to improper input validation in the Intel oneAPI Math Kernel Library.
How do I fix CVE-2025-31948?
To fix CVE-2025-31948, upgrade to Intel oneAPI Math Kernel Library version 2025.2 or later.
What software is affected by CVE-2025-31948?
CVE-2025-31948 affects Intel oneAPI Math Kernel Library versions prior to 2025.2.
What type of attack can exploit CVE-2025-31948?
CVE-2025-31948 can be exploited by an unprivileged software adversary via a low complexity denial of service attack.
Can CVE-2025-31948 be exploited by unauthorized users?
CVE-2025-31948 requires an authenticated user for exploitation, but it can allow a denial of service.