CVE-2025-31936
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6...
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
7.0
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
CVE-2025-31936- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-1260, CWE-1260
- Updated
- 2026-11-02
EUVDEUVD-2025-210690
7.0
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
EUVD-2025-210690- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-v7w9-9v5r-766h
7.0
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6...
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
GHSA-v7w9-9v5r-766h- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-1260
- Updated
- 2026-11-02
NVD
7.0
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
CVE-2025-31936- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-1260
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-31936
5.7
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
DEBIAN-CVE-2025-31936- CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-06
OSVOESA-2026-3408
7.2
microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs.
Security Fix(es):
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.(CVE-2025-31936)
Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.(CVE-2025-31938)
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.(CVE-2025-35973)
Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.(CVE-2026-20707)
Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.(CVE-2026-20713)
Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality…
- Record
OESA-2026-3408- CVSS 4.0
- 7.2 High
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
Show 20 moreShow less
OSVRHSA-2026:65147
7.2
Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update
- Record
RHSA-2026:65147- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:67979
7.2
Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update
- Record
RHSA-2026:67979- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:68011
7.2
Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update
- Record
RHSA-2026:68011- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRLSA-2026:65147
7.2
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
-
kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
-
kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [Rocky Linux 8] Update Intel CPU microcode to the latest version (JIRA:Rocky Linux-240770)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:65147- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRLSA-2026:67979
7.2
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
-
kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
-
kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [Rocky Linux 10.2.z] Update Intel CPU microcode to the latest version (JIRA:Rocky Linux-260582)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:67979- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRLSA-2026:68011
7.2
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
-
kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
-
kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [Rocky Linux 9.8.z] Update Intel CPU microcode to the latest version (JIRA:Rocky Linux-260496)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:68011- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-31936
7.0
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
UBUNTU-CVE-2025-31936- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 5.7 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVALSA-2026:65147 No score
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
- kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
- kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [AlmaLinux 8] Update Intel CPU microcode to the latest version (JIRA:AlmaLinux-240770)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:65147- Updated
- 2026-11-02
OSVALSA-2026:67979 No score
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
- kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
- kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [AlmaLinux 10.2.z] Update Intel CPU microcode to the latest version (JIRA:AlmaLinux-260582)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:67979- Updated
- 2026-11-02
OSVALSA-2026:68011 No score
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
- kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
- kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [AlmaLinux 9.8.z] Update Intel CPU microcode to the latest version (JIRA:AlmaLinux-260496)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:68011- Updated
- 2026-11-02
OSVMGASA-2026-0374 No score
Updated microcode packages fix security vulnerabilities
A potential security vulnerability for some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions (Intel® TDX) may allow escalation of privilege. (CVE-2025-31936) A potential security vulnerability in some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions (Intel® TDX) may allow information disclosure. (CVE-2025-31938) A potential security vulnerability in some Intel® Processors may allow information disclosure. (CVE-2026-20917) A potential security vulnerability in some Intel® Processors may allow escalation of privilege. (CVE-2025-35973) A potential security vulnerability in some Intel® Processors may allow escalation of privilege. (CVE-2026-20716) A potential security vulnerability in some Intel® Processors may allow denial of service. (CVE-2026-20760) Potential security vulnerabilities in some Intel® Xeon® Processors may allow escalation of privilege. (CVE-2026-20713) A potential security vulnerability in some 3rd Gen Intel® Xeon® Scalable Processors may allow denial of service. (CVE-2026-20707)
- Record
MGASA-2026-0374- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11599-1 No score
ucode-intel-20260812-1.1 on GA media
These are all security issues fixed in the ucode-intel-20260812-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11599-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21736-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
-
Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
-
Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)
-
CVE-2025-35979: Security updates for INTEL-SA-01420
-
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html
-
Update for various functional issues.
New Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores
-
-
Update to microcode-20260227:
-
Update for functional issues. Refer to Intel� Xeon� 6700P-B/6500P-B-Series SoC with P-Cores for details.
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
-
- Record
openSUSE-SU-2026:21736-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23449-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:23449-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23459-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
-
Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
-
Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)
-
CVE-2025-35979: Security updates for INTEL-SA-01420
-
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html
-
Update for various functional issues.
New Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores
-
-
Update to microcode-20260227:
-
Update for functional issues. Refer to Intel Xeon 6700P-B/6500P-B-Series SoC with P-Cores for details.
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
-
- Record
SUSE-SU-2026:23459-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23539-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:23539-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23602-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
-
Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
-
Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)
-
CVE-2025-35979: Security updates for INTEL-SA-01420
-
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html
-
Update for various functional issues.
New Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores
-
-
Update to microcode-20260227:
-
Update for functional issues. Refer to Intel Xeon 6700P-B/6500P-B-Series SoC with P-Cores for details.
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
-
- Record
SUSE-SU-2026:23602-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3917-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:3917-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4019-1 No score
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:4019-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4025-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:4025-1- Updated
- 2026-11-02
Affected products
- intel xeon 6315p firmware
- intel xeon 6325p firmware
- intel xeon 6333p firmware
- intel xeon 6337p firmware
- intel xeon 6349p firmware
- intel xeon 6353p firmware
- intel xeon 6357p firmware
- intel xeon 6369p firmware
- intel xeon 6377p firmware
- intel xeon 6503p-b firmware
- intel xeon 6503p firmware
- intel xeon 6505p firmware
Show 61 moreShow less
- intel xeon 6507p firmware
- intel xeon 6511p firmware
- intel xeon 6513p-b firmware
- intel xeon 6515p firmware
- intel xeon 6516p-b firmware
- intel xeon 6517p firmware
- intel xeon 6518p-b firmware
- intel xeon 6520p firmware
- intel xeon 6521p firmware
- intel xeon 6523p-b firmware
- intel xeon 6527p firmware
- intel xeon 6530p firmware
- intel xeon 6532p-b firmware
- intel xeon 6533p-b firmware
- intel xeon 6543p-b firmware
- intel xeon 6544p-b firmware
- intel xeon 6546p-b firmware
- intel xeon 6548p-b firmware
- intel xeon 6553p-b firmware
- intel xeon 6556p-b firmware
- intel xeon 6563p-b firmware
- intel xeon 6706p-b firmware
- intel xeon 6714p firmware
- intel xeon 6716p-b firmware
- intel xeon 6718p-b firmware
- intel xeon 6724p firmware
- intel xeon 6725p firmware
- intel xeon 6726p-b firmware
- intel xeon 6728p firmware
- intel xeon 6730p firmware
- intel xeon 6731p firmware
- intel xeon 6732p firmware
- intel xeon 6736p firmware
- intel xeon 6737p firmware
- intel xeon 6738p firmware
- intel xeon 6740p firmware
- intel xeon 6741p firmware
- intel xeon 6745p firmware
- intel xeon 6747p firmware
- intel xeon 6748p firmware
- intel xeon 6756p-b firmware
- intel xeon 6760p firmware
- intel xeon 6761p firmware
- intel xeon 6766p-b firmware
- intel xeon 6767p firmware
- intel xeon 6768p-b firmware
- intel xeon 6768p firmware
- intel xeon 6774p firmware
- intel xeon 6776p-b firmware
- intel xeon 6776p firmware
- intel xeon 6781p firmware
- intel xeon 6787p firmware
- intel xeon 6788p firmware
- intel xeon 6944p firmware
- intel xeon 6952p firmware
- intel xeon 6960p firmware
- intel xeon 6962p firmware
- intel xeon 6972p firmware
- intel xeon 6978p firmware
- intel xeon 6979p firmware
- intel xeon 6980p firmware
Affected packages
| Package | Affected | Fixed |
|---|---|---|
microcode_ctlAlmaLinux:8 From an advisory covering 2 CVEs |
before 4:20260812-1.el8_10 | 4:20260812-1.el8_10 |
microcode_ctlAlmaLinux:10 From an advisory covering 2 CVEs |
before 4:20260812-0.el10_2 | 4:20260812-0.el10_2 |
microcode_ctlAlmaLinux:9 From an advisory covering 2 CVEs |
before 4:20260210-1.20260812.1.el9_8 | 4:20260210-1.20260812.1.el9_8 |
intel-microcodeDebian:12 |
All versions, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
None known |
intel-microcodeDebian:13 |
All versions, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
None known |
intel-microcodeDebian:14 |
before 3.20260925.1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20260925.1 |
microcodeMageia:10 From an advisory covering 8 CVEs |
before 0.20260812-1.mga10.nonfree | 0.20260812-1.mga10.nonfree |
microcodeMageia:9 From an advisory covering 8 CVEs |
before 0.20260812-1.mga9.nonfree | 0.20260812-1.mga9.nonfree |
microcode_ctlopenEuler:20.03-LTS-SP4 From an advisory covering 9 CVEs |
before 20260811-1.oe2003sp4 | 20260811-1.oe2003sp4 |
microcode_ctlopenEuler:22.03-LTS-SP4 From an advisory covering 9 CVEs |
before 20260811-1.oe2203sp4 | 20260811-1.oe2203sp4 |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
microcode_ctlopenEuler:24.03-LTS-SP1 From an advisory covering 9 CVEs |
before 20260811-1.oe2403sp1 | 20260811-1.oe2403sp1 |
microcode_ctlopenEuler:24.03-LTS-SP3 From an advisory covering 9 CVEs |
before 20260811-1.oe2403sp3 | 20260811-1.oe2403sp3 |
microcode_ctlopenEuler:24.03-LTS-SP4 From an advisory covering 9 CVEs |
before 20260811-1.oe2403sp4 | 20260811-1.oe2403sp4 |
microcode_ctlRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 4:20260812-1.el8_10 | 4:20260812-1.el8_10 |
microcode_ctlRed Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs |
before 4:20260812-0.el10_2 | 4:20260812-0.el10_2 |
microcode_ctlRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 4:20260210-1.20260812.1.el9_8 | 4:20260210-1.20260812.1.el9_8 |
microcode_ctlRocky Linux:8 From an advisory covering 2 CVEs |
before 4:20260812-1.el8_10 | 4:20260812-1.el8_10 |
microcode_ctlRocky Linux:10 From an advisory covering 2 CVEs |
before 4:20260812-0.el10_2 | 4:20260812-0.el10_2 |
microcode_ctlRocky Linux:9 From an advisory covering 2 CVEs |
before 4:20260210-1.20260812.1.el9_8 | 4:20260210-1.20260812.1.el9_8 |
ucode-intelSUSE:Linux Micro 6.0 From an advisory covering 9 CVEs |
before 20260812-1.1 | 20260812-1.1 |
ucode-intelSUSE:Linux Micro 6.2 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
ucode-intelSUSE:Linux Micro 6.1 From an advisory covering 9 CVEs |
before 20260812-slfo.1.1_1.1 | 20260812-slfo.1.1_1.1 |
ucode-intelSUSE:Linux Enterprise Server 16.0 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 9 CVEs |
before 20260812-164.1 | 20260812-164.1 |
ucode-intelSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 9 CVEs |
before 20260812-164.1 | 20260812-164.1 |
microcode_ctlSUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 9 CVEs |
before 1.17-102.83.98.1 | 1.17-102.83.98.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.3 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.4 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.5 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
intel-microcodeUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2 Show 17 moreShow less3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.23.20210608.0ubuntu0.14.04.1+esm1 |
None known |
intel-microcodeUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1 Show 28 moreShow less3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.13.20210608.0ubuntu0.16.04.1+esm13.20220510.0ubuntu0.16.04.1+esm13.20230214.0ubuntu0.16.04.1+esm13.20230808.0ubuntu0.16.04.1+esm13.20231114.0ubuntu0.16.04.1+esm13.20240514.0ubuntu0.16.04.1+esm13.20240813.0ubuntu0.16.04.1+esm23.20240910.0ubuntu0.16.04.1+esm13.20241112.0ubuntu0.16.04.1+esm13.20250211.0ubuntu0.16.04.1+esm13.20250512.0ubuntu0.16.04.1+esm13.20250812.0ubuntu0.16.04.1+esm13.20260210.0ubuntu0.16.04.1+esm1 |
None known |
intel-microcodeUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1 Show 28 moreShow less3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.13.20210608.0ubuntu0.18.04.13.20220510.0ubuntu0.18.04.13.20220809.0ubuntu0.18.04.13.20230214.0ubuntu0.18.04.13.20230808.0ubuntu0.18.04.1+esm13.20231114.0ubuntu0.18.04.1+esm13.20240514.0ubuntu0.18.04.1+esm13.20240813.0ubuntu0.18.04.1+esm23.20240910.0ubuntu0.18.04.1+esm13.20241112.0ubuntu0.18.04.1+esm13.20250211.0ubuntu0.18.04.1+esm13.20250512.0ubuntu0.18.04.1+esm13.20250812.0ubuntu0.18.04.1+esm13.20260210.0ubuntu0.18.04.1+esm1 |
None known |
intel-microcodeUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0 Show 19 moreShow less3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.13.20210608.0ubuntu0.20.04.13.20220510.0ubuntu0.20.04.13.20220809.0ubuntu0.20.04.13.20230214.0ubuntu0.20.04.13.20230808.0ubuntu0.20.04.13.20231114.0ubuntu0.20.04.13.20240514.0ubuntu0.20.04.13.20240813.0ubuntu0.20.04.23.20240910.0ubuntu0.20.04.13.20241112.0ubuntu0.20.04.13.20250211.0ubuntu0.20.04.13.20250512.0ubuntu0.20.04.13.20250812.0ubuntu0.20.04.1+esm13.20260210.0ubuntu0.20.04.1+esm1 |
None known |
intel-microcodeUbuntu:22.04:LTS |
All versions, plus listed versions 3.20210608.2ubuntu13.20220510.0ubuntu0.22.04.13.20220809.0ubuntu0.22.04.13.20230214.0ubuntu0.22.04.13.20230808.0ubuntu0.22.04.1 Show 9 moreShow less3.20231114.0ubuntu0.22.04.13.20240514.0ubuntu0.22.04.13.20240813.0ubuntu0.22.04.23.20240910.0ubuntu0.22.04.13.20241112.0ubuntu0.22.04.13.20250211.0ubuntu0.22.04.13.20250512.0ubuntu0.22.04.13.20250812.0ubuntu0.22.04.13.20260210.0ubuntu0.22.04.1 |
None known |
intel-microcodeUbuntu:24.04:LTS |
All versions, plus listed versions 3.20230808.13.20231114.0ubuntu13.20231114.13.20240312.13.20240312.1build1 Show 8 moreShow less3.20240514.0ubuntu0.24.04.13.20240813.0ubuntu0.24.04.23.20240910.0ubuntu0.24.04.13.20241112.0ubuntu0.24.04.13.20250211.0ubuntu0.24.04.13.20250512.0ubuntu0.24.04.13.20250812.0ubuntu0.24.04.13.20260210.0ubuntu0.24.04.1 |
None known |
intel-microcodeUbuntu:26.10 |
All versions, plus listed versions 3.20260210.1ubuntu23.20260227.1ubuntu1 |
None known |
intel-microcodeUbuntu:26.04:LTS |
All versions, plus listed versions 3.20250512.1ubuntu13.20250812.1ubuntu13.20260210.1ubuntu13.20260210.1ubuntu2 |
None known |
ucode-intelopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 20260812-1.1 | 20260812-1.1 |
ucode-intelopenSUSE:Leap 16.0 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-31936 is a high vulnerability (CVSS 7.0) in Intel Xeon 6315p Firmware, published August 11, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 0th percentile. Fixed in intel-microcode 3.20260925.1.
References
intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html
nvd.nist.gov/vuln/detail/CVE-2025-31936
github.com/advisories/GHSA-v7w9-9v5r-766h
access.redhat.com/errata/RHSA-2026:65147
access.redhat.com/security/cve/CVE-2025-31936
access.redhat.com/security/cve/CVE-2025-35973
Show 56 moreShow less
bugzilla.redhat.com/2514104
bugzilla.redhat.com/2514115
errata.almalinux.org/8/ALSA-2026-65147.html
access.redhat.com/errata/RHSA-2026:67979
errata.almalinux.org/10/ALSA-2026-67979.html
access.redhat.com/errata/RHSA-2026:68011
errata.almalinux.org/9/ALSA-2026-68011.html
security-tracker.debian.org/tracker/CVE-2025-31936
advisories.mageia.org/MGASA-2026-0374.html
bugs.mageia.org/show_bug.cgi?id=36155
github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260811
github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260812
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-3408
nvd.nist.gov/vuln/detail/CVE-2025-31938
nvd.nist.gov/vuln/detail/CVE-2025-35973
nvd.nist.gov/vuln/detail/CVE-2026-20707
nvd.nist.gov/vuln/detail/CVE-2026-20713
nvd.nist.gov/vuln/detail/CVE-2026-20716
nvd.nist.gov/vuln/detail/CVE-2026-20760
nvd.nist.gov/vuln/detail/CVE-2026-20901
nvd.nist.gov/vuln/detail/CVE-2026-20917
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2514104
bugzilla.redhat.com/show_bug.cgi?id=2514115
issues.redhat.com/browse/RHEL-240770
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65147.json
cve.org/CVERecord?id=CVE-2025-31936
cve.org/CVERecord?id=CVE-2025-35973
intel.com/content/www/us/en/security-center/advisory/intel-sa-01428.html
issues.redhat.com/browse/RHEL-260582
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67979.json
issues.redhat.com/browse/RHEL-260496
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68011.json
errata.rockylinux.org/RLSA-2026:65147
errata.rockylinux.org/RLSA-2026:67979
errata.rockylinux.org/RLSA-2026:68011
suse.com/support/update/announcement/2026/suse-su-202623449-1
bugzilla.suse.com/1274785
suse.com/security/cve/CVE-2025-31936
suse.com/security/cve/CVE-2025-31938
suse.com/security/cve/CVE-2025-35973
suse.com/security/cve/CVE-2026-20707
suse.com/security/cve/CVE-2026-20713
suse.com/security/cve/CVE-2026-20716
suse.com/security/cve/CVE-2026-20760
suse.com/security/cve/CVE-2026-20901
suse.com/security/cve/CVE-2026-20917
suse.com/support/update/announcement/2026/suse-su-202623459-1
bugzilla.suse.com/1265189
suse.com/security/cve/CVE-2025-35979
suse.com/support/update/announcement/2026/suse-su-202623539-1
suse.com/support/update/announcement/2026/suse-su-202623602-1
suse.com/support/update/announcement/2026/suse-su-20263917-1
suse.com/support/update/announcement/2026/suse-su-20264019-1
suse.com/support/update/announcement/2026/suse-su-20264025-1
ubuntu.com/security/CVE-2025-31936
Left out here: 482 versions and the rest of 1 source description. The JSON record has them.