CVE-2025-35973
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and...
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
- Record
CVE-2025-35973- CVSS 4.0
- 4.5 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N - Weakness
- CWE-229
- Updated
- 2026-11-02
EUVDEUVD-2025-210692
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
- Record
EUVD-2025-210692- CVSS 4.0
- 4.5 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-g4r3-3x88-prrw
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and...
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
- Record
GHSA-g4r3-3x88-prrw- CVSS 4.0
- 4.5 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-229
- Updated
- 2026-11-02
NVD
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
- Record
CVE-2025-35973- CVSS 4.0
- 4.5 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-229
- Updated
- 2026-11-02
OSVALPINE-CVE-2025-35973
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
- Record
ALPINE-CVE-2025-35973- CVSS 4.0
- 4.5 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-35973
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
- Record
DEBIAN-CVE-2025-35973- CVSS 4.0
- 4.5 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-06
Show 26 moreShow less
OSVOESA-2026-3408
microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs.
Security Fix(es):
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.(CVE-2025-31936)
Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.(CVE-2025-31938)
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.(CVE-2025-35973)
Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.(CVE-2026-20707)
Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.(CVE-2026-20713)
Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality…
- Record
OESA-2026-3408- CVSS 4.0
- 7.2 High
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
OSVRHSA-2026:65147
Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update
- Record
RHSA-2026:65147- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:67979
Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update
- Record
RHSA-2026:67979- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:68011
Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update
- Record
RHSA-2026:68011- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRLSA-2026:65147
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
-
kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
-
kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [Rocky Linux 8] Update Intel CPU microcode to the latest version (JIRA:Rocky Linux-240770)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:65147- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRLSA-2026:67979
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
-
kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
-
kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [Rocky Linux 10.2.z] Update Intel CPU microcode to the latest version (JIRA:Rocky Linux-260582)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:67979- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRLSA-2026:68011
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
-
kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
-
kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [Rocky Linux 9.8.z] Update Intel CPU microcode to the latest version (JIRA:Rocky Linux-260496)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:68011- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-35973
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
- Record
UBUNTU-CVE-2025-35973- CVSS 4.0
- 4.5 Medium
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N - Updated
- 2026-11-02
OSVALSA-2026:65147 No score
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
- kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
- kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [AlmaLinux 8] Update Intel CPU microcode to the latest version (JIRA:AlmaLinux-240770)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:65147- Updated
- 2026-11-02
OSVALSA-2026:67979 No score
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
- kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
- kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [AlmaLinux 10.2.z] Update Intel CPU microcode to the latest version (JIRA:AlmaLinux-260582)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:67979- Updated
- 2026-11-02
OSVALSA-2026:68011 No score
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors.
Security Fix(es):
- kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973)
- kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936)
Bug Fix(es) and Enhancement(s):
- [AlmaLinux 9.8.z] Update Intel CPU microcode to the latest version (JIRA:AlmaLinux-260496)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:68011- Updated
- 2026-11-02
OSVCLSA-2026-1789116715 No score
microcode_ctl: Fix of CVE-2025-35973
- Update Intel CPU microcode to 20260812 release, addresses
CVE-2025-35973 (INTEL-SA-01428); the release also carries INTEL-SA-01379,
-01404, -01423, -01435, -01441, -01442 and -01443. 20260812 withdraws the
06-aa-04 revision 0x2a that 20260811 shipped, so MTL C0 (cpuid:A06A4) gets
0x28:
- Addition of cpuid:806F8/0x10 microcode at revision 0x2c000435;
- Addition of cpuid:806F8/0x87 microcode at revision 0x2b000685;
- Addition of cpuid:90672/0x07 microcode at revision 0x3e;
- Addition of cpuid:906A3/0x80 microcode at revision 0x43b;
- Addition of cpuid:B0671/0x36 microcode at revision 0x137;
- Addition of cpuid:B0674/0x36 microcode at revision 0x137;
- Addition of cpuid:B06A2/0xe0 microcode at revision 0x6134;
- Addition of cpuid:C0662/0x82 microcode at revision 0x122;
- Addition of cpuid:C06C1/0x94 microcode at revision 0x11c;
- Addition of cpuid:C06C2/0x94 microcode at revision 0x11c;
- Addition of cpuid:C06C3/0x94 microcode at revision 0x11c;
- Addition of cpuid:C06F2/0x87 microcode at revision 0x210002f4;
- Addition of cpuid:D0650/0xc0 microcode at revision 0xc;
- Addition of cpuid:D0651/0xc0 microcode at revision 0xc;
- Addition of cpuid:D0670/0x36 microcode at revision 0x137;
- Addition of cpuid:E0652/0x94 microcode at revision 0x11c;
- Removal of cpuid:806F8/0x10 microcode at revision 0x2c000410;
- Removal of cpuid:806F8/0x87 microcode at revision 0x2b000650;
- Removal of cpuid:90672/0x07 microcode at revision 0x3d;
- Removal of cpuid:906A3/0x80 microcode at revision 0x43a;
- Removal of cpuid:B0671/0x32 microcode at revision 0x132;
- Removal of cpuid:B0674/0x32 microcode at revision 0x132;
- Removal of cpuid:B06A2/0xe0 microcode at revision 0x6133;
- Removal of cpuid:C0662/0x82 microcode at revision 0x11a;
- Removal of cpuid:C06F2/0x87 microcode at revision 0x21000291;
- Removal of cpuid:C06F2/0x87 microcode at revision 0x210002c0;
- Update of cpuid:606A6/0x87 (ICX-SP D0) microcode from revision 0xd000410 up to 0xd000433;
- Update of cpuid:606C1/0x10 microcode from revision 0x10002e0 up to 0x1000301;
- Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode from revision 0xca up to 0xce;
- Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode from revision 0xbc up to 0xbe;
- Update of cpuid:806C2/0xc2 (TGL-R C0) microcode from revision 0x3c up to 0x3e;
- Update of cpuid:806D1/0xc2 (TGL-H R0) microcode from revision 0x56 up to 0x58;
- Update of cpuid:806F4/0x10 microcode from revision 0x2c000410 up to 0x2c000435;
- Update of cpuid:806F4/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:806F5/0x10 microcode from revision 0x2c000410 up to 0x2c000435;
- Update of cpuid:806F5/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:806F6/0x10 microcode from revision 0x2c000410 up to 0x2c000435;
- Update of cpuid:806F6/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:806F7/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:90675/0x07 microcode from revision 0x3d up to 0x3e;
- Update of cpuid:906A4/0x40 microcode from revision 0xb up to 0xc;
- Update of cpuid:906A4/0x80 microcode from revision 0x43a up to 0x43b;
- Update of cpuid:A0671/0x02 (RKL-S B0) microcode from revision 0x64 up to 0x66;
- Update of cpuid:A06A4/0xe6 microcode from revision 0x25 up to 0x28;
- Update of cpuid:A06D1/0x20 microcode from revision 0xa000124 up to 0xa000151;
- Update of cpuid:A06D1/0x95 microcode from revision 0x10003f0 up to 0x1000434;
- Update of cpuid:A06E1/0x97 microcode from revision 0x1000273 up to 0x1000309;
- Update of cpuid:A06F3/0x01 microcode from revision 0x3000382 up to 0x30003b2;
- Update of cpuid:B0650/0x80 microcode from revision 0xa up to 0xe;
- Update of cpuid:B06A3/0xe0 microcode from revision 0x6133 up to 0x6134;
- Update of cpuid:B06A8/0xe0 microcode from…
- Record
CLSA-2026-1789116715- Updated
- 2026-11-02
OSVCLSA-2026-1789116898 No score
microcode_ctl: Fix of CVE-2025-35973
- Update Intel CPU microcode to 20260812 release, addresses
CVE-2025-35973 (INTEL-SA-01428); the release also carries INTEL-SA-01379,
-01404, -01423, -01435, -01441, -01442 and -01443. 20260812 withdraws the
06-aa-04 revision 0x2a that 20260811 shipped, so MTL C0 (cpuid:A06A4) gets
0x28:
- Addition of cpuid:806F8/0x10 microcode at revision 0x2c000435;
- Addition of cpuid:806F8/0x87 microcode at revision 0x2b000685;
- Addition of cpuid:90672/0x07 microcode at revision 0x3e;
- Addition of cpuid:906A3/0x80 microcode at revision 0x43b;
- Addition of cpuid:B0671/0x36 microcode at revision 0x137;
- Addition of cpuid:B0674/0x36 microcode at revision 0x137;
- Addition of cpuid:B06A2/0xe0 microcode at revision 0x6134;
- Addition of cpuid:C0662/0x82 microcode at revision 0x122;
- Addition of cpuid:C06C1/0x94 microcode at revision 0x11c;
- Addition of cpuid:C06C2/0x94 microcode at revision 0x11c;
- Addition of cpuid:C06C3/0x94 microcode at revision 0x11c;
- Addition of cpuid:C06F2/0x87 microcode at revision 0x210002f4;
- Addition of cpuid:D0650/0xc0 microcode at revision 0xc;
- Addition of cpuid:D0651/0xc0 microcode at revision 0xc;
- Addition of cpuid:D0670/0x36 microcode at revision 0x137;
- Addition of cpuid:E0652/0x94 microcode at revision 0x11c;
- Removal of cpuid:806F8/0x10 microcode at revision 0x2c000410;
- Removal of cpuid:806F8/0x87 microcode at revision 0x2b000650;
- Removal of cpuid:90672/0x07 microcode at revision 0x3d;
- Removal of cpuid:906A3/0x80 microcode at revision 0x43a;
- Removal of cpuid:B0671/0x32 microcode at revision 0x132;
- Removal of cpuid:B0674/0x32 microcode at revision 0x132;
- Removal of cpuid:B06A2/0xe0 microcode at revision 0x6133;
- Removal of cpuid:C0662/0x82 microcode at revision 0x11a;
- Removal of cpuid:C06F2/0x87 microcode at revision 0x21000291;
- Removal of cpuid:C06F2/0x87 microcode at revision 0x210002c0;
- Update of cpuid:606A6/0x87 (ICX-SP D0) microcode from revision 0xd000410 up to 0xd000433;
- Update of cpuid:606C1/0x10 microcode from revision 0x10002e0 up to 0x1000301;
- Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode from revision 0xca up to 0xce;
- Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode from revision 0xbc up to 0xbe;
- Update of cpuid:806C2/0xc2 (TGL-R C0) microcode from revision 0x3c up to 0x3e;
- Update of cpuid:806D1/0xc2 (TGL-H R0) microcode from revision 0x56 up to 0x58;
- Update of cpuid:806F4/0x10 microcode from revision 0x2c000410 up to 0x2c000435;
- Update of cpuid:806F4/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:806F5/0x10 microcode from revision 0x2c000410 up to 0x2c000435;
- Update of cpuid:806F5/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:806F6/0x10 microcode from revision 0x2c000410 up to 0x2c000435;
- Update of cpuid:806F6/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:806F7/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:90675/0x07 microcode from revision 0x3d up to 0x3e;
- Update of cpuid:906A4/0x40 microcode from revision 0xb up to 0xc;
- Update of cpuid:906A4/0x80 microcode from revision 0x43a up to 0x43b;
- Update of cpuid:A0671/0x02 (RKL-S B0) microcode from revision 0x64 up to 0x66;
- Update of cpuid:A06A4/0xe6 microcode from revision 0x25 up to 0x28;
- Update of cpuid:A06D1/0x20 microcode from revision 0xa000124 up to 0xa000151;
- Update of cpuid:A06D1/0x95 microcode from revision 0x10003f0 up to 0x1000434;
- Update of cpuid:A06E1/0x97 microcode from revision 0x1000273 up to 0x1000309;
- Update of cpuid:A06F3/0x01 microcode from revision 0x3000382 up to 0x30003b2;
- Update of cpuid:B0650/0x80 microcode from revision 0xa up to 0xe;
- Update of cpuid:B06A3/0xe0 microcode from revision 0x6133 up to 0x6134;
- Update of cpuid:B06A8/0xe0 microcode from…
- Record
CLSA-2026-1789116898- Updated
- 2026-11-02
OSVCLSA-2026-1789117244 No score
microcode_ctl: Fix of CVE-2025-35973
- Update Intel CPU microcode to 20260812 release, addresses
CVE-2025-35973 (INTEL-SA-01428); the release also carries INTEL-SA-01379,
-01404, -01423, -01435, -01441, -01442 and -01443. 20260812 withdraws the
06-aa-04 revision 0x2a that 20260811 shipped, so MTL C0 (cpuid:A06A4) gets
0x28:
- Addition of cpuid:806F8/0x10 microcode at revision 0x2c000435;
- Addition of cpuid:806F8/0x87 microcode at revision 0x2b000685;
- Addition of cpuid:90672/0x07 microcode at revision 0x3e;
- Addition of cpuid:906A3/0x80 microcode at revision 0x43b;
- Addition of cpuid:B0671/0x36 microcode at revision 0x137;
- Addition of cpuid:B0674/0x36 microcode at revision 0x137;
- Addition of cpuid:B06A2/0xe0 microcode at revision 0x6134;
- Addition of cpuid:C0662/0x82 microcode at revision 0x122;
- Addition of cpuid:C06C1/0x94 microcode at revision 0x11c;
- Addition of cpuid:C06C2/0x94 microcode at revision 0x11c;
- Addition of cpuid:C06C3/0x94 microcode at revision 0x11c;
- Addition of cpuid:C06F2/0x87 microcode at revision 0x210002f4;
- Addition of cpuid:D0650/0xc0 microcode at revision 0xc;
- Addition of cpuid:D0651/0xc0 microcode at revision 0xc;
- Addition of cpuid:D0670/0x36 microcode at revision 0x137;
- Addition of cpuid:E0652/0x94 microcode at revision 0x11c;
- Removal of cpuid:806F8/0x10 microcode at revision 0x2c000410;
- Removal of cpuid:806F8/0x87 microcode at revision 0x2b000650;
- Removal of cpuid:90672/0x07 microcode at revision 0x3d;
- Removal of cpuid:906A3/0x80 microcode at revision 0x43a;
- Removal of cpuid:B0671/0x32 microcode at revision 0x132;
- Removal of cpuid:B0674/0x32 microcode at revision 0x132;
- Removal of cpuid:B06A2/0xe0 microcode at revision 0x6133;
- Removal of cpuid:C0662/0x82 microcode at revision 0x11a;
- Removal of cpuid:C06F2/0x87 microcode at revision 0x21000291;
- Removal of cpuid:C06F2/0x87 microcode at revision 0x210002c0;
- Update of cpuid:606A6/0x87 (ICX-SP D0) microcode from revision 0xd000410 up to 0xd000433;
- Update of cpuid:606C1/0x10 microcode from revision 0x10002e0 up to 0x1000301;
- Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode from revision 0xca up to 0xce;
- Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode from revision 0xbc up to 0xbe;
- Update of cpuid:806C2/0xc2 (TGL-R C0) microcode from revision 0x3c up to 0x3e;
- Update of cpuid:806D1/0xc2 (TGL-H R0) microcode from revision 0x56 up to 0x58;
- Update of cpuid:806F4/0x10 microcode from revision 0x2c000410 up to 0x2c000435;
- Update of cpuid:806F4/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:806F5/0x10 microcode from revision 0x2c000410 up to 0x2c000435;
- Update of cpuid:806F5/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:806F6/0x10 microcode from revision 0x2c000410 up to 0x2c000435;
- Update of cpuid:806F6/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:806F7/0x87 microcode from revision 0x2b000650 up to 0x2b000685;
- Update of cpuid:90675/0x07 microcode from revision 0x3d up to 0x3e;
- Update of cpuid:906A4/0x40 microcode from revision 0xb up to 0xc;
- Update of cpuid:906A4/0x80 microcode from revision 0x43a up to 0x43b;
- Update of cpuid:A0671/0x02 (RKL-S B0) microcode from revision 0x64 up to 0x66;
- Update of cpuid:A06A4/0xe6 microcode from revision 0x25 up to 0x28;
- Update of cpuid:A06D1/0x20 microcode from revision 0xa000124 up to 0xa000151;
- Update of cpuid:A06D1/0x95 microcode from revision 0x10003f0 up to 0x1000434;
- Update of cpuid:A06E1/0x97 microcode from revision 0x1000273 up to 0x1000309;
- Update of cpuid:A06F3/0x01 microcode from revision 0x3000382 up to 0x30003b2;
- Update of cpuid:B0650/0x80 microcode from revision 0xa up to 0xe;
- Update of cpuid:B06A3/0xe0 microcode from revision 0x6133 up to 0x6134;
- Update of cpuid:B06A8/0xe0 microcode from…
- Record
CLSA-2026-1789117244- Updated
- 2026-11-02
OSVCLSA-2026-1790091171 No score
microcode_ctl: Fix of 6 CVEs
- CVE-2025-35973: update Intel CPU microcode data files to release 20260812, which carries the INTEL-SA-01428 mitigation
- Record
CLSA-2026-1790091171- Updated
- 2026-11-02
OSVCLSA-2026-1791485704 No score
microcode_ctl: Fix of CVE-2025-35973
- CVE-2025-35973: update Intel CPU microcode data files to release 20260925, which restores the Meteor Lake 06-aa-04 update (revision 0x28 -> 0x2b) that release 20260812 withdrew, completing the INTEL-SA-01428 mitigation for that family; the other affected families were already covered by 20260812
- Record
CLSA-2026-1791485704- Updated
- 2026-11-02
OSVMGASA-2026-0374 No score
Updated microcode packages fix security vulnerabilities
A potential security vulnerability for some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions (Intel® TDX) may allow escalation of privilege. (CVE-2025-31936) A potential security vulnerability in some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions (Intel® TDX) may allow information disclosure. (CVE-2025-31938) A potential security vulnerability in some Intel® Processors may allow information disclosure. (CVE-2026-20917) A potential security vulnerability in some Intel® Processors may allow escalation of privilege. (CVE-2025-35973) A potential security vulnerability in some Intel® Processors may allow escalation of privilege. (CVE-2026-20716) A potential security vulnerability in some Intel® Processors may allow denial of service. (CVE-2026-20760) Potential security vulnerabilities in some Intel® Xeon® Processors may allow escalation of privilege. (CVE-2026-20713) A potential security vulnerability in some 3rd Gen Intel® Xeon® Scalable Processors may allow denial of service. (CVE-2026-20707)
- Record
MGASA-2026-0374- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11599-1 No score
ucode-intel-20260812-1.1 on GA media
These are all security issues fixed in the ucode-intel-20260812-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11599-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21736-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
-
Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
-
Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)
-
CVE-2025-35979: Security updates for INTEL-SA-01420
-
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html
-
Update for various functional issues.
New Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores
-
-
Update to microcode-20260227:
-
Update for functional issues. Refer to Intel� Xeon� 6700P-B/6500P-B-Series SoC with P-Cores for details.
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
-
- Record
openSUSE-SU-2026:21736-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23449-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:23449-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23459-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
-
Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
-
Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)
-
CVE-2025-35979: Security updates for INTEL-SA-01420
-
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html
-
Update for various functional issues.
New Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores
-
-
Update to microcode-20260227:
-
Update for functional issues. Refer to Intel Xeon 6700P-B/6500P-B-Series SoC with P-Cores for details.
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
-
- Record
SUSE-SU-2026:23459-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23539-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:23539-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23602-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
-
Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
-
Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)
-
CVE-2025-35979: Security updates for INTEL-SA-01420
-
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html
-
Update for various functional issues.
New Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores
-
-
Update to microcode-20260227:
-
Update for functional issues. Refer to Intel Xeon 6700P-B/6500P-B-Series SoC with P-Cores for details.
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
-
- Record
SUSE-SU-2026:23602-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3917-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:3917-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4019-1 No score
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:4019-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4025-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:4025-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
intel-ucodeAlpine:v3.21 |
before 20260812-r0 | 20260812-r0 |
intel-ucodeAlpine:v3.22 |
before 20260812-r0 | 20260812-r0 |
intel-ucodeAlpine:v3.23 |
before 20260812-r0 | 20260812-r0 |
intel-ucodeAlpine:v3.24 |
before 20260812-r0 | 20260812-r0 |
microcode_ctlAlmaLinux:8 From an advisory covering 2 CVEs |
before 4:20260812-1.el8_10 | 4:20260812-1.el8_10 |
microcode_ctlAlmaLinux:10 From an advisory covering 2 CVEs |
before 4:20260812-0.el10_2 | 4:20260812-0.el10_2 |
microcode_ctlAlmaLinux:9 From an advisory covering 2 CVEs |
before 4:20260210-1.20260812.1.el9_8 | 4:20260210-1.20260812.1.el9_8 |
intel-ucodeAlpaquita:23 |
20230516a-r0 up to 20260812-r0 | 20260812-r0 |
intel-ucodeAlpaquita:25 |
20250512-r0 up to 20260812-r0 | 20260812-r0 |
intel-ucodeAlpaquita:stream |
20230214-r0 up to 20260812-r0 | 20260812-r0 |
Show 53 moreShow less
| Package | Affected | Fixed |
|---|---|---|
microcode_ctlTuxCare:CentOS:8.5 |
before 4:20260812-1.el8.tuxcare.els1 | 4:20260812-1.el8.tuxcare.els1 |
microcode_ctlTuxCare:CentOS:8.4 |
before 4:20260812-1.el8.tuxcare.els1 | 4:20260812-1.el8.tuxcare.els1 |
microcode_ctlTuxCare:CentOS-Stream:8 |
before 4:20260812-2.el8.tuxcare.els1 | 4:20260812-2.el8.tuxcare.els1 |
microcode_ctlTuxCare:AlmaLinux:9.6 |
before 4:20250211-1.20260812.1.el9_6.tuxcare.els2 | 4:20250211-1.20260812.1.el9_6.tuxcare.els2 |
microcode_ctlTuxCare:AlmaLinux:9.2 |
before 4:20250211-1.20260925.1.el9_2.tuxcare.els3 | 4:20250211-1.20260925.1.el9_2.tuxcare.els3 |
intel-microcodeDebian:12 |
All versions, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
None known |
intel-microcodeDebian:13 |
All versions, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
None known |
intel-microcodeDebian:14 |
before 3.20260925.1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20260925.1 |
microcodeMageia:10 From an advisory covering 8 CVEs |
before 0.20260812-1.mga10.nonfree | 0.20260812-1.mga10.nonfree |
microcodeMageia:9 From an advisory covering 8 CVEs |
before 0.20260812-1.mga9.nonfree | 0.20260812-1.mga9.nonfree |
microcode_ctlopenEuler:20.03-LTS-SP4 From an advisory covering 9 CVEs |
before 20260811-1.oe2003sp4 | 20260811-1.oe2003sp4 |
microcode_ctlopenEuler:22.03-LTS-SP4 From an advisory covering 9 CVEs |
before 20260811-1.oe2203sp4 | 20260811-1.oe2203sp4 |
microcode_ctlopenEuler:24.03-LTS-SP1 From an advisory covering 9 CVEs |
before 20260811-1.oe2403sp1 | 20260811-1.oe2403sp1 |
microcode_ctlopenEuler:24.03-LTS-SP3 From an advisory covering 9 CVEs |
before 20260811-1.oe2403sp3 | 20260811-1.oe2403sp3 |
microcode_ctlopenEuler:24.03-LTS-SP4 From an advisory covering 9 CVEs |
before 20260811-1.oe2403sp4 | 20260811-1.oe2403sp4 |
microcode_ctlRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 4:20260812-1.el8_10 | 4:20260812-1.el8_10 |
microcode_ctlRed Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs |
before 4:20260812-0.el10_2 | 4:20260812-0.el10_2 |
microcode_ctlRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 4:20260210-1.20260812.1.el9_8 | 4:20260210-1.20260812.1.el9_8 |
microcode_ctlRocky Linux:8 From an advisory covering 2 CVEs |
before 4:20260812-1.el8_10 | 4:20260812-1.el8_10 |
microcode_ctlRocky Linux:10 From an advisory covering 2 CVEs |
before 4:20260812-0.el10_2 | 4:20260812-0.el10_2 |
microcode_ctlRocky Linux:9 From an advisory covering 2 CVEs |
before 4:20260210-1.20260812.1.el9_8 | 4:20260210-1.20260812.1.el9_8 |
ucode-intelSUSE:Linux Micro 6.0 From an advisory covering 9 CVEs |
before 20260812-1.1 | 20260812-1.1 |
ucode-intelSUSE:Linux Micro 6.2 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
ucode-intelSUSE:Linux Micro 6.1 From an advisory covering 9 CVEs |
before 20260812-slfo.1.1_1.1 | 20260812-slfo.1.1_1.1 |
ucode-intelSUSE:Linux Enterprise Server 16.0 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 9 CVEs |
before 20260812-164.1 | 20260812-164.1 |
ucode-intelSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 9 CVEs |
before 20260812-164.1 | 20260812-164.1 |
microcode_ctlSUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 9 CVEs |
before 1.17-102.83.98.1 | 1.17-102.83.98.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.3 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.4 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.5 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
intel-microcodeUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2 Show 17 moreShow less3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.23.20210608.0ubuntu0.14.04.1+esm1 |
None known |
intel-microcodeUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1 Show 28 moreShow less3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.13.20210608.0ubuntu0.16.04.1+esm13.20220510.0ubuntu0.16.04.1+esm13.20230214.0ubuntu0.16.04.1+esm13.20230808.0ubuntu0.16.04.1+esm13.20231114.0ubuntu0.16.04.1+esm13.20240514.0ubuntu0.16.04.1+esm13.20240813.0ubuntu0.16.04.1+esm23.20240910.0ubuntu0.16.04.1+esm13.20241112.0ubuntu0.16.04.1+esm13.20250211.0ubuntu0.16.04.1+esm13.20250512.0ubuntu0.16.04.1+esm13.20250812.0ubuntu0.16.04.1+esm13.20260210.0ubuntu0.16.04.1+esm1 |
None known |
intel-microcodeUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1 Show 28 moreShow less3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.13.20210608.0ubuntu0.18.04.13.20220510.0ubuntu0.18.04.13.20220809.0ubuntu0.18.04.13.20230214.0ubuntu0.18.04.13.20230808.0ubuntu0.18.04.1+esm13.20231114.0ubuntu0.18.04.1+esm13.20240514.0ubuntu0.18.04.1+esm13.20240813.0ubuntu0.18.04.1+esm23.20240910.0ubuntu0.18.04.1+esm13.20241112.0ubuntu0.18.04.1+esm13.20250211.0ubuntu0.18.04.1+esm13.20250512.0ubuntu0.18.04.1+esm13.20250812.0ubuntu0.18.04.1+esm13.20260210.0ubuntu0.18.04.1+esm1 |
None known |
intel-microcodeUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0 Show 19 moreShow less3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.13.20210608.0ubuntu0.20.04.13.20220510.0ubuntu0.20.04.13.20220809.0ubuntu0.20.04.13.20230214.0ubuntu0.20.04.13.20230808.0ubuntu0.20.04.13.20231114.0ubuntu0.20.04.13.20240514.0ubuntu0.20.04.13.20240813.0ubuntu0.20.04.23.20240910.0ubuntu0.20.04.13.20241112.0ubuntu0.20.04.13.20250211.0ubuntu0.20.04.13.20250512.0ubuntu0.20.04.13.20250812.0ubuntu0.20.04.1+esm13.20260210.0ubuntu0.20.04.1+esm1 |
None known |
intel-microcodeUbuntu:22.04:LTS |
All versions, plus listed versions 3.20210608.2ubuntu13.20220510.0ubuntu0.22.04.13.20220809.0ubuntu0.22.04.13.20230214.0ubuntu0.22.04.13.20230808.0ubuntu0.22.04.1 Show 9 moreShow less3.20231114.0ubuntu0.22.04.13.20240514.0ubuntu0.22.04.13.20240813.0ubuntu0.22.04.23.20240910.0ubuntu0.22.04.13.20241112.0ubuntu0.22.04.13.20250211.0ubuntu0.22.04.13.20250512.0ubuntu0.22.04.13.20250812.0ubuntu0.22.04.13.20260210.0ubuntu0.22.04.1 |
None known |
intel-microcodeUbuntu:24.04:LTS |
All versions, plus listed versions 3.20230808.13.20231114.0ubuntu13.20231114.13.20240312.13.20240312.1build1 Show 8 moreShow less3.20240514.0ubuntu0.24.04.13.20240813.0ubuntu0.24.04.23.20240910.0ubuntu0.24.04.13.20241112.0ubuntu0.24.04.13.20250211.0ubuntu0.24.04.13.20250512.0ubuntu0.24.04.13.20250812.0ubuntu0.24.04.13.20260210.0ubuntu0.24.04.1 |
None known |
intel-microcodeUbuntu:26.10 |
All versions, plus listed versions 3.20260210.1ubuntu23.20260227.1ubuntu1 |
None known |
intel-microcodeUbuntu:26.04:LTS |
All versions, plus listed versions 3.20250512.1ubuntu13.20250812.1ubuntu13.20260210.1ubuntu13.20260210.1ubuntu2 |
None known |
ucode-intelopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 20260812-1.1 | 20260812-1.1 |
ucode-intelopenSUSE:Leap 16.0 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-35973 is a medium vulnerability (CVSS 4.5) in intel-ucode, published August 11, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 0th percentile. Fixed in intel-ucode 20260812-r0.
References
intel.com/content/www/us/en/security-center/advisory/intel-sa-01428.html
nvd.nist.gov/vuln/detail/CVE-2025-35973
github.com/advisories/GHSA-g4r3-3x88-prrw
security.alpinelinux.org/vuln/CVE-2025-35973
access.redhat.com/errata/RHSA-2026:65147
Show 68 moreShow less
bugzilla.redhat.com/2514104
errata.almalinux.org/8/ALSA-2026-65147.html
docs.bell-sw.com/security/cves/CVE-2025-35973
errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1789116715.html
security-tracker.debian.org/tracker/CVE-2025-35973
advisories.mageia.org/MGASA-2026-0374.html
bugs.mageia.org/show_bug.cgi?id=36155
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-3408
issues.redhat.com/browse/RHEL-240770
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65147.json
cve.org/CVERecord?id=CVE-2025-31936
errata.rockylinux.org/RLSA-2026:65147
suse.com/support/update/announcement/2026/suse-su-202623449-1
bugzilla.suse.com/1274785
ubuntu.com/security/CVE-2025-35973
Left out here: 482 versions and the rest of 4 source descriptions. The JSON record has them.