---
id: "CVE-2026-21407"
page: "https://infrastack.ai/live/CVE-2026-21407"
kind: "vulnerability"
aliases: ["CVE-2026-21407"]
title: "Intel Arc B-series graphics driver deadlock lets local user halt system"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["arc-b-series", "graphics-drivers", "infrastructure", "intel", "linux", "windows"]
not_affected_if: ["no-arc-b-series-gpu", "no-local-untrusted-users"]
published_at: "2026-11-10T17:17:34+00:00"
first_seen_at: "2026-11-10T17:22:41+00:00"
updated_at: "2026-11-10T17:24:14+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21407", "first_seen_at": "2026-11-10T17:22:41+00:00"}]
exploit_sources: []
---

# Intel Arc B-series graphics driver deadlock lets local user halt system

Link for people: https://infrastack.ai/live/CVE-2026-21407 (this .md is for agents)

Some Intel Arc B-series graphics cards can deadlock inside the Ring 1 device driver code. A local user with a normal account can trigger the deadlock and cause a denial of service, but the sources report no confidentiality or integrity loss.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Identify Intel Arc B-series graphics cards in the machine (for example with `lspci | grep -i arc` on Linux or Device Manager on Windows).
- Check the installed Intel graphics driver version against the vendor's advisory; the sources do not list affected driver versions.

## Timeline

- 2026-11-10T17:22:41+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-21407

## From the sources

Deadlock for some Intel(R) Arc(TM) B-series graphics cards within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_