CVE-2025-31648
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an...
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
- Record
CVE-2025-31648- CVSS 4.0
- 1.8 Low
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N - CVSS 3.1
- 3.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N - Weakness
- CWE-229
- Updated
- 2026-11-02
EUVDEUVD-2025-207126
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
- Record
EUVD-2025-207126- CVSS 4.0
- 1.8 Low
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-cf43-7r7r-9f4f
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an...
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
- Record
GHSA-cf43-7r7r-9f4f- CVSS 4.0
- 1.8 Low
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 3.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N - Weakness
- CWE-229
- Updated
- 2026-11-02
NVD
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
- Record
CVE-2025-31648- CVSS 4.0
- 1.8 Low
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 3.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N - Weakness
- CWE-229
- Updated
- 2026-11-02
OSVALPINE-CVE-2025-31648
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
- Record
ALPINE-CVE-2025-31648- CVSS 4.0
- 1.8 Low
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-02
OSVBELL-CVE-2025-31648
- Record
BELL-CVE-2025-31648- CVSS 3.1
- 3.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
Show 19 moreShow less
OSVDEBIAN-CVE-2025-31648
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
- Record
DEBIAN-CVE-2025-31648- CVSS 4.0
- 1.8 Low
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-02
OSVOESA-2026-1418
microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs.
Security Fix(es):
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.(CVE-2025-31648)
- Record
OESA-2026-1418- CVSS 3.1
- 3.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1419
microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs.
Security Fix(es):
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.(CVE-2025-31648)
- Record
OESA-2026-1419- CVSS 3.1
- 3.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1420
microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs.
Security Fix(es):
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.(CVE-2025-31648)
- Record
OESA-2026-1420- CVSS 3.1
- 3.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1421
microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs.
Security Fix(es):
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.(CVE-2025-31648)
- Record
OESA-2026-1421- CVSS 3.1
- 3.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1422
microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs.
Security Fix(es):
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.(CVE-2025-31648)
- Record
OESA-2026-1422- CVSS 3.1
- 3.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1440
microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs.
Security Fix(es):
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.(CVE-2025-31648)
- Record
OESA-2026-1440- CVSS 3.1
- 3.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-31648
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
- Record
UBUNTU-CVE-2025-31648- CVSS 4.0
- 1.8 Low
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N - CVSS 3.1
- 3.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVMGASA-2026-0043 No score
Updated microcode packages fix security vulnerabilities
The updated package updates AMD CPUs microcodes and fixes security vulnerabilities in Intel CPUs microcodes: Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24853) Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts. (CVE-2025-31648)
- Record
MGASA-2026-0043- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10229-1 No score
ucode-intel-20260210-1.1 on GA media
These are all security issues fixed in the ucode-intel-20260210-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10229-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20401-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260210 release (bsc#1258046):
-
CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access (bsc#1229129).
-
CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege (bsc#1258046).
-
-
Intel CPU Microcode was updated to the 20251111 release (bsc#1253319):
- Update for functional issues.
-
switch the supplements to use supplements + kernel to allow moving a installation to Intel hardware (bsc#1249138)
-
Intel CPU Microcode was updated to the 20241029 release (bsc#1230400):
- Update for functional issues.
- Record
openSUSE-SU-2026:20401-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0668-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260210 release (bsc#1258046)
- CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access. (bsc#1229129)
- CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege. (bsc#1258046)
- Record
SUSE-SU-2026:0668-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0669-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260210 release (bsc#1258046)
- CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access. (bsc#1229129)
- CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege. (bsc#1258046)
- Record
SUSE-SU-2026:0669-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0670-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260210 release (bsc#1258046)
- CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access. (bsc#1229129)
- CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege. (bsc#1258046)
- Record
SUSE-SU-2026:0670-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20522-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260210 release (bsc#1258046):
-
CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access (bsc#1229129).
-
CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege (bsc#1258046).
-
- Record
SUSE-SU-2026:20522-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20682-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260210 release (bsc#1258046):
-
CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access (bsc#1229129).
-
CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege (bsc#1258046).
-
- Record
SUSE-SU-2026:20682-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20758-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260210 release (bsc#1258046):
-
CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access (bsc#1229129).
-
CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege (bsc#1258046).
-
-
Intel CPU Microcode was updated to the 20251111 release (bsc#1253319):
- Update for functional issues.
-
switch the supplements to use supplements + kernel to allow moving a installation to Intel hardware (bsc#1249138)
-
Intel CPU Microcode was updated to the 20241029 release (bsc#1230400):
- Update for functional issues.
- Record
SUSE-SU-2026:20758-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20941-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260210 release (bsc#1258046):
-
CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access (bsc#1229129).
-
CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege (bsc#1258046).
-
-
Intel CPU Microcode was updated to the 20251111 release (bsc#1253319):
- Update for functional issues.
-
switch the supplements to use supplements + kernel to allow moving a installation to Intel hardware (bsc#1249138)
-
Intel CPU Microcode was updated to the 20241029 release (bsc#1230400):
- Update for functional issues.
- Record
SUSE-SU-2026:20941-1- Updated
- 2026-11-02
OSVUSN-8068-1 No score
intel-microcode vulnerability
Sergiu Ghetie discovered that some Intel® processors did not properly handle values in the microcode flow. A local authenticated user could potentially use this issue to escalate their privileges.
- Record
USN-8068-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
intel-ucodeAlpine:v3.20 |
before 20260210-r0 | 20260210-r0 |
intel-ucodeAlpine:v3.21 |
before 20260210-r0 | 20260210-r0 |
intel-ucodeAlpine:v3.22 |
before 20260210-r0 | 20260210-r0 |
intel-ucodeAlpine:v3.23 |
before 20260210-r0 | 20260210-r0 |
intel-ucodeAlpine:v3.24 |
before 20260210-r0 | 20260210-r0 |
intel-ucodeAlpaquita:23 |
20230516a-r0 up to 20260210-r0 | 20260210-r0 |
intel-ucodeAlpaquita:25 |
20250512-r0 up to 20260210-r0 | 20260210-r0 |
intel-ucodeAlpaquita:stream |
20230214-r0 up to 20260210-r0 | 20260210-r0 |
intel-microcodeDebian:12 |
All versions, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
None known |
intel-microcodeDebian:13 |
All versions, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
None known |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
intel-microcodeDebian:14 |
before 3.20260210.1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20260210.1 |
microcodeMageia:9 From an advisory covering 2 CVEs |
before 0.20260210-1.mga9.nonfree | 0.20260210-1.mga9.nonfree |
microcode_ctlopenEuler:24.03-LTS-SP1 |
before 20260210.1-1.oe2403sp1 | 20260210.1-1.oe2403sp1 |
microcode_ctlopenEuler:24.03-LTS-SP2 |
before 20260210.1-1.oe2403sp2 | 20260210.1-1.oe2403sp2 |
microcode_ctlopenEuler:24.03-LTS-SP3 |
before 20260210.1-1.oe2403sp3 | 20260210.1-1.oe2403sp3 |
microcode_ctlopenEuler:22.03-LTS-SP4 |
before 20260210.1-1.oe2203sp4 | 20260210.1-1.oe2203sp4 |
microcode_ctlopenEuler:24.03-LTS |
before 20260210.1-1.oe2403 | 20260210.1-1.oe2403 |
microcode_ctlopenEuler:20.03-LTS-SP4 |
before 20260210.1-1.oe2003sp4 | 20260210.1-1.oe2003sp4 |
ucode-intelSUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.2 From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelopenSUSE:Leap 15.6 From an advisory covering 2 CVEs |
before 20260210-150200.62.1 | 20260210-150200.62.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 2 CVEs |
before 20260210-158.1 | 20260210-158.1 |
ucode-intelSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 2 CVEs |
before 20260210-158.1 | 20260210-158.1 |
microcode_ctlSUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 2 CVEs |
before 1.17-102.83.90.1 | 1.17-102.83.90.1 |
ucode-intelSUSE:Linux Micro 6.0 From an advisory covering 2 CVEs |
before 20260210-1.1 | 20260210-1.1 |
ucode-intelSUSE:Linux Micro 6.1 From an advisory covering 2 CVEs |
before 20260210-slfo.1.1_1.1 | 20260210-slfo.1.1_1.1 |
ucode-intelSUSE:Linux Micro 6.2 From an advisory covering 2 CVEs |
before 20260210-160000.1.1 | 20260210-160000.1.1 |
ucode-intelSUSE:Linux Enterprise Server 16.0 From an advisory covering 2 CVEs |
before 20260210-160000.1.1 | 20260210-160000.1.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 2 CVEs |
before 20260210-160000.1.1 | 20260210-160000.1.1 |
intel-microcodeUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2 Show 17 moreShow less3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.23.20210608.0ubuntu0.14.04.1+esm1 |
None known |
intel-microcodeUbuntu:Pro:16.04:LTS |
before 3.20260210.0ubuntu0.16.04.1+esm1, plus listed versions 3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1 Show 27 moreShow less3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.13.20210608.0ubuntu0.16.04.1+esm13.20220510.0ubuntu0.16.04.1+esm13.20230214.0ubuntu0.16.04.1+esm13.20230808.0ubuntu0.16.04.1+esm13.20231114.0ubuntu0.16.04.1+esm13.20240514.0ubuntu0.16.04.1+esm13.20240813.0ubuntu0.16.04.1+esm23.20240910.0ubuntu0.16.04.1+esm13.20241112.0ubuntu0.16.04.1+esm13.20250211.0ubuntu0.16.04.1+esm13.20250512.0ubuntu0.16.04.1+esm13.20250812.0ubuntu0.16.04.1+esm1 |
3.20260210.0ubuntu0.16.04.1+esm1 |
intel-microcodeUbuntu:Pro:18.04:LTS |
before 3.20260210.0ubuntu0.18.04.1+esm1, plus listed versions 3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1 Show 27 moreShow less3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.13.20210608.0ubuntu0.18.04.13.20220510.0ubuntu0.18.04.13.20220809.0ubuntu0.18.04.13.20230214.0ubuntu0.18.04.13.20230808.0ubuntu0.18.04.1+esm13.20231114.0ubuntu0.18.04.1+esm13.20240514.0ubuntu0.18.04.1+esm13.20240813.0ubuntu0.18.04.1+esm23.20240910.0ubuntu0.18.04.1+esm13.20241112.0ubuntu0.18.04.1+esm13.20250211.0ubuntu0.18.04.1+esm13.20250512.0ubuntu0.18.04.1+esm13.20250812.0ubuntu0.18.04.1+esm1 |
3.20260210.0ubuntu0.18.04.1+esm1 |
intel-microcodeUbuntu:Pro:20.04:LTS |
before 3.20260210.0ubuntu0.20.04.1+esm1, plus listed versions 3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0 Show 18 moreShow less3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.13.20210608.0ubuntu0.20.04.13.20220510.0ubuntu0.20.04.13.20220809.0ubuntu0.20.04.13.20230214.0ubuntu0.20.04.13.20230808.0ubuntu0.20.04.13.20231114.0ubuntu0.20.04.13.20240514.0ubuntu0.20.04.13.20240813.0ubuntu0.20.04.23.20240910.0ubuntu0.20.04.13.20241112.0ubuntu0.20.04.13.20250211.0ubuntu0.20.04.13.20250512.0ubuntu0.20.04.13.20250812.0ubuntu0.20.04.1+esm1 |
3.20260210.0ubuntu0.20.04.1+esm1 |
intel-microcodeUbuntu:22.04:LTS |
before 3.20260210.0ubuntu0.22.04.1, plus listed versions 3.20210608.2ubuntu13.20220510.0ubuntu0.22.04.13.20220809.0ubuntu0.22.04.13.20230214.0ubuntu0.22.04.13.20230808.0ubuntu0.22.04.1 Show 8 moreShow less3.20231114.0ubuntu0.22.04.13.20240514.0ubuntu0.22.04.13.20240813.0ubuntu0.22.04.23.20240910.0ubuntu0.22.04.13.20241112.0ubuntu0.22.04.13.20250211.0ubuntu0.22.04.13.20250512.0ubuntu0.22.04.13.20250812.0ubuntu0.22.04.1 |
3.20260210.0ubuntu0.22.04.1 |
intel-microcodeUbuntu:24.04:LTS |
before 3.20260210.0ubuntu0.24.04.1, plus listed versions 3.20230808.13.20231114.0ubuntu13.20231114.13.20240312.13.20240312.1build1 Show 7 moreShow less3.20240514.0ubuntu0.24.04.13.20240813.0ubuntu0.24.04.23.20240910.0ubuntu0.24.04.13.20241112.0ubuntu0.24.04.13.20250211.0ubuntu0.24.04.13.20250512.0ubuntu0.24.04.13.20250812.0ubuntu0.24.04.1 |
3.20260210.0ubuntu0.24.04.1 |
intel-microcodeUbuntu:25.10 |
before 3.20260210.0ubuntu0.25.10.1, plus listed versions 3.20250211.1ubuntu13.20250512.1ubuntu13.20250812.0ubuntu0.25.10.1 |
3.20260210.0ubuntu0.25.10.1 |
ucode-intelopenSUSE:Tumbleweed |
before 20260210-1.1 | 20260210-1.1 |
ucode-intelopenSUSE:Leap 16.0 From an advisory covering 2 CVEs |
before 20260210-160000.1.1 | 20260210-160000.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-31648 is a low vulnerability (CVSS 1.8) in microcode, published February 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in intel-ucode 20260210-r0.
References
intel.com/content/www/us/en/security-center/advisory/intel-sa-01396.html
nvd.nist.gov/vuln/detail/CVE-2025-31648
github.com/advisories/GHSA-cf43-7r7r-9f4f
security.alpinelinux.org/vuln/CVE-2025-31648
docs.bell-sw.com/security/cves/CVE-2025-31648
security-tracker.debian.org/tracker/CVE-2025-31648
Show 26 moreShow less
advisories.mageia.org/MGASA-2026-0043.html
bugs.mageia.org/show_bug.cgi?id=35130
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-1418
suse.com/support/update/announcement/2026/suse-su-20260668-1
bugzilla.suse.com/1229129
ubuntu.com/security/CVE-2025-31648
cve.org/CVERecord?id=CVE-2025-31648
Left out here: 478 versions. The JSON record has them.