CVE-2026-24693: Medium severity Intel oneCCL Bindings for PyTorch vulnerability
Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Intel(R) oneCCL Bindings for PyTorchto a version that resolves this vulnerability.Fixed in v2.8.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24693?
The severity of CVE-2026-24693 is rated as 44.
How do I fix CVE-2026-24693?
To fix CVE-2026-24693, upgrade the Intel oneCCL Bindings for PyTorch to version v2.8.0 or later.
What type of vulnerability is CVE-2026-24693?
CVE-2026-24693 is a protection mechanism failure that may allow escalation of privilege.
Who is affected by CVE-2026-24693?
CVE-2026-24693 affects users of Intel oneCCL Bindings for PyTorch prior to version v2.8.0.
What can be exploited with CVE-2026-24693?
CVE-2026-24693 can be exploited by unprivileged software adversaries to escalate privileges in user applications.