{"id":"CVE-2026-21407","kind":"vulnerability","aliases":["CVE-2026-21407"],"related":[],"title":"Intel Arc B-series graphics driver deadlock lets local user halt system","description":"Deadlock for some Intel(R) Arc(TM) B-series graphics cards within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Some Intel Arc B-series graphics cards can deadlock inside the Ring 1 device driver code. A local user with a normal account can trigger the deadlock and cause a denial of service, but the sources report no confidentiality or integrity loss.","severity":"medium","cvss":6.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["arc-b-series","graphics-drivers","infrastructure","intel","linux","windows"],"not_affected_if":["no-arc-b-series-gpu","no-local-untrusted-users"],"how_to_check":"- Identify Intel Arc B-series graphics cards in the machine (for example with `lspci | grep -i arc` on Linux or Device Manager on Windows).\n- Check the installed Intel graphics driver version against the vendor's advisory; the sources do not list affected driver versions.","fix":null,"status":"open","published_at":"2026-11-10T17:17:34+00:00","first_seen_at":"2026-11-10T17:22:41+00:00","triaged_at":"2026-11-10T17:24:14+00:00","updated_at":"2026-11-10T17:24:14+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T17:24:14Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel Arc B-series graphics driver deadlock lets local user halt system","impact":"low","summary":"Some Intel Arc B-series graphics cards can deadlock inside the Ring 1 device driver code. A local user with a normal account can trigger the deadlock and cause a denial of service, but the sources report no confidentiality or integrity loss.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel","arc-b-series","graphics-drivers","windows","linux"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user halts the machine via driver deadlock","analyst_note":"Find Intel's security advisory for this CVE to confirm affected driver versions and the fixed driver release.","how_to_check":"- Identify Intel Arc B-series graphics cards in the machine (for example with `lspci | grep -i arc` on Linux or Device Manager on Windows).\n- Check the installed Intel graphics driver version against the vendor's advisory; the sources do not list affected driver versions.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-arc-b-series-gpu","no-local-untrusted-users"],"who_is_affected":"Machines with Intel Arc B-series graphics cards where a local, logged-in user can run software. The sources describe a local attack by an authenticated user with low complexity and no user interaction. Systems without these cards, or without local user access, are not described as exposed.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000748,"input_tokens":4661,"output_tokens":563,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-21407':16A,19A '1':44B,88C 'access':122C 'account':54B 'adversari':99C 'allow':92C 'arc':2A,21B,33B,79C 'arc-b-seri':20B 'attack':109C,124C 'authent':102C 'avail':149C,164C 'b':4A,22B,35B,82C 'b-seri':3A,34B,81C 'card':38B,85C 'caus':60B 'code':47B 'combin':104C 'complex':108C 'confidenti':70B,144C,159C 'cve':14A,17A 'deadlock':8A,40B,58B,74C 'denial':62B,94C,112C 'devic':45B,89C 'driver':7A,26B,46B,90C 'enabl':111C 'graphic':6A,25B,37B,84C 'graphics-driv':24B 'halt':12A 'high':150C 'impact':142C,166C 'infrastructur':27B 'insid':41B 'integr':72B,146C,161C 'intel':1A,28B,32B,77C 'interact':137C 'intern':131C 'knowledg':132C 'let':9A 'linux':29B 'local':10A,49B,121C 'loss':73B 'low':107C 'may':91C,110C,117C,141C 'none':145C,147C,160C,162C,165C 'normal':53B 'occur':119C 'potenti':118C,139C 'present':128C 'r':78C 'report':68B 'requir':125C,134C 'result':116C,155C 'ring':43B,87C 'seri':5A,23B,36B,83C 'servic':64B,96C,114C 'softwar':98C 'sourc':67B 'special':130C 'subsequ':157C 'system':13A,154C,158C 'tm':80C 'trigger':56B 'unprivileg':97C 'user':11A,50B,103C,136C 'via':120C 'vulner':140C,153C 'window':30B 'within':86C","nicknames":[],"mitigations":[],"who_affected":"Machines with Intel Arc B-series graphics cards where a local, logged-in user can run software. The sources describe a local attack by an authenticated user with low complexity and no user interaction. Systems without these cards, or without local user access, are not described as exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["arcbseries","graphicsdrivers","infrastructure","intel","linux","medium","windows"],"campaign_type":null,"search_a":"'-2026':15A,18A '-21407':16A,19A 'arc':2A 'b':4A 'b-seri':3A 'cve':14A,17A 'deadlock':8A 'driver':7A 'graphic':6A 'halt':12A 'intel':1A 'let':9A 'local':10A 'seri':5A 'system':13A 'user':11A","search_b":"'1':44B 'account':54B 'arc':21B,33B 'arc-b-seri':20B 'b':22B,35B 'b-seri':34B 'card':38B 'caus':60B 'code':47B 'confidenti':70B 'deadlock':40B,58B 'denial':62B 'devic':45B 'driver':26B,46B 'graphic':25B,37B 'graphics-driv':24B 'infrastructur':27B 'insid':41B 'integr':72B 'intel':28B,32B 'linux':29B 'local':49B 'loss':73B 'normal':53B 'report':68B 'ring':43B 'seri':23B,36B 'servic':64B 'sourc':67B 'trigger':56B 'user':50B 'window':30B","search_c":"'1':88C 'access':122C 'adversari':99C 'allow':92C 'arc':79C 'attack':109C,124C 'authent':102C 'avail':149C,164C 'b':82C 'b-seri':81C 'card':85C 'combin':104C 'complex':108C 'confidenti':144C,159C 'deadlock':74C 'denial':94C,112C 'devic':89C 'driver':90C 'enabl':111C 'graphic':84C 'high':150C 'impact':142C,166C 'integr':146C,161C 'intel':77C 'interact':137C 'intern':131C 'knowledg':132C 'local':121C 'low':107C 'may':91C,110C,117C,141C 'none':145C,147C,160C,162C,165C 'occur':119C 'potenti':118C,139C 'present':128C 'r':78C 'requir':125C,134C 'result':116C,155C 'ring':87C 'seri':83C 'servic':96C,114C 'softwar':98C 'special':130C 'subsequ':157C 'system':154C,158C 'tm':80C 'unprivileg':97C 'user':103C,136C 'via':120C 'vulner':140C,153C 'within':86C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:34+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-21407","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21407","severity":null,"published_at":"2026-11-10T17:17:34+00:00","modified_at":"2026-11-10T17:17:34+00:00","first_seen_at":"2026-11-10T17:22:41+00:00","fetched_at":"2026-11-10T17:22:41+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}