CVE-2023-50197: Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability

Routine

HIGH 7.8DOWNGRADE

CVE-2023-50197 is a high-severity flaw (CVSS 7.8) affecting driver \& support assistant. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DSA Service. By creating a symbolic link, an attacker can abu

Why this priority

High severity

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	7.8 (High)
Attack vector	Local
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	0.2% (top 84%)
CISA exploited list	No
Weakness	CWE-59
Published	2024-05-03
Last modified	2026-06-17

Publisher (CNA): Zero Day Initiative · Vendor: intel

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2024-05-03 03:16 UTCPublished CVE record published
2026-06-17 06:39 UTCUpdated Record last modified

intel driver \& support assistant DOWNGRADE

Affected: 23.3.25.6

Fixed in: no fixed release known

Safe to downgrade to: a release before 23.3.25.6

1. Check installed version

apt-cache policy driver--support-assistant || rpm -q driver--support-assistant || driver--support-assistant --version

2. No fixed release: DOWNGRADE to a release before 23.3.25.6 (Debian / Ubuntu)

apt-cache madison driver--support-assistant sudo apt install driver--support-assistant=<VERSION_BEFORE_23.3.25.6> sudo apt-mark hold driver--support-assistant

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list driver--support-assistant sudo dnf downgrade driver--support-assistant-<VERSION_BEFORE_23.3.25.6> sudo dnf versionlock add driver--support-assistant

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-50197?

driver \& support assistant: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2023-50197 being exploited?

CVE-2023-50197 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-50197 affect?

CVE-2023-50197 affects driver \& support assistant. Severity is high (CVSS 7.8). Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first

How urgent is CVE-2023-50197?

Priority 31/100. High severity

Software pages

Intel vulnerabilities

Related CVEs

CVE-2024-36488 HIGH 7.3 UPGRADE Improper Access Control in some Intel(R) DSA before version 24.3.26.8 may allow an authenticated user to poten
CVE-2024-36294 MEDIUM 6.7 UPGRADE Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authentica
CVE-2023-45743 MEDIUM 6.7 UPGRADE Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an aut
CVE-2023-42099 HIGH 7.8 DOWNGRADE Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability
CVE-2023-39425 HIGH 8.8 UPGRADE Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user t

References

← Back to latest CVEs