This vulnerability in Intel oneCCL Bindings for PyTorch prior to v2.8.0 arises from a protection mechanism failure in user applications operating in Ring 3. An attacker with some privileged user access and local presence can perform a low complexity attack with passive user interaction to escalate privileges. The flaw affects the confidentiality, integrity, and availability of the vulnerable system components at a high level, though no further system-wide impacts are described. The CVSS 4.0 base score is 5.4, reflecting a medium severity. No patch or official remediation guidance has been provided yet.

The vulnerability allows escalation of privilege, potentially compromising the confidentiality, integrity, and availability of the affected system components at a high level. However, no direct impact on overall system confidentiality, integrity, or availability beyond the vulnerable components is indicated. Exploitation requires local access and some existing privileges, with low attack complexity and passive user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published at this time. Users should monitor Intel's advisories for updates and apply patches once available.