CVE-2025-31936
Fixed in a distro release EPSS <1%CVSS 7.0
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Products: intel xeon_6337p_firmware, intel xeon_6349p_firmware, intel xeon_6353p_firmware, intel xeon_6357p_firmware, intel xeon_6369p_firmware, intel xeon_6377p_firmware, intel xeon_6503p_firmware, intel xeon_6503p-b_firmware, intel xeon_6505p_firmware, intel xeon_6507p_firmware, intel xeon_6511p_firmware, intel xeon_6513p-b_firmware, intel xeon_6515p_firmware, intel xeon_6516p-b_firmware, intel xeon_6517p_firmware, intel xeon_6518p-b_firmware, intel xeon_6520p_firmware, intel xeon_6521p_firmware, intel xeon_6523p-b_firmware, intel xeon_6527p_firmware, intel xeon_6530p_firmware, intel xeon_6532p-b_firmware, intel xeon_6533p-b_firmware, intel xeon_6543p-b_firmware, intel xeon_6544p-b_firmware, intel xeon_6546p-b_firmware, intel xeon_6548p-b_firmware, intel xeon_6553p-b_firmware, intel xeon_6556p-b_firmware, intel xeon_6563p-b_firmware, intel xeon_6706p-b_firmware, intel xeon_6714p_firmware, intel xeon_6716p-b_firmware, intel xeon_6718p-b_firmware, intel xeon_6724p_firmware, intel xeon_6725p_firmware, intel xeon_6726p-b_firmware, intel xeon_6728p_firmware, intel xeon_6730p_firmware, intel xeon_6731p_firmware, intel xeon_6732p_firmware, intel xeon_6736p_firmware, intel xeon_6737p_firmware, intel xeon_6738p_firmware, intel xeon_6740p_firmware, intel xeon_6741p_firmware, intel xeon_6745p_firmware, intel xeon_6747p_firmware, intel xeon_6748p_firmware, intel xeon_6756p-b_firmware, intel xeon_6760p_firmware, intel xeon_6761p_firmware, intel xeon_6766p-b_firmware, intel xeon_6767p_firmware, intel xeon_6768p_firmware, intel xeon_6768p-b_firmware, intel xeon_6774p_firmware, intel xeon_6776p_firmware, intel xeon_6776p-b_firmware, intel xeon_6781p_firmware, intel xeon_6787p_firmware, intel xeon_6788p_firmware, intel xeon_6944p_firmware, intel xeon_6952p_firmware, intel xeon_6960p_firmware, intel xeon_6962p_firmware, intel xeon_6972p_firmware, intel xeon_6978p_firmware, intel xeon_6979p_firmware, intel xeon_6980p_firmware, intel xeon_6315p_firmware, intel xeon_6325p_firmware, intel xeon_6333p_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | microcode_ctl | 4:20260812-0.el10_2 |
| AlmaLinux 8 | microcode_ctl | 4:20260812-1.el8_10 |
| AlmaLinux 9 | microcode_ctl | 4:20260210-1.20260812.1.el9_8 |
| Amazon Linux 2 | microcode_ctl | 2:2.1-47.amzn2.4.28 |
| Amazon Linux 2023 | microcode_ctl | 2:2.1-53.amzn2023.0.16 |
| Debian 12 | intel-microcode | no fix |
| Debian 13 | intel-microcode | no fix |
| Debian 14 | intel-microcode | no fix |
| Red Hat Enterprise Linux 10.2 | microcode_ctl | 4:20260812-0.el10_2 |
| Red Hat Enterprise Linux 8 | microcode_ctl | 4:20260812-1.el8_10 |
| Red Hat Enterprise Linux 9 | microcode_ctl | 4:20260210-1.20260812.1.el9_8 |
| Rocky Linux 10 | microcode_ctl | 4:20260812-0.el10_2 |
| Rocky Linux 8 | microcode_ctl | 4:20260812-1.el8_10 |
| Rocky Linux 9 | microcode_ctl | 4:20260210-1.20260812.1.el9_8 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise Micro 5.3 | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise Micro 5.4 | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise Micro 5.5 | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | microcode_ctl | 1.17-102.83.98.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | ucode-intel | 20260812-164.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise Server 16.0 | ucode-intel | 20260812-160000.1.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | ucode-intel | 20260812-164.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | ucode-intel | 20260812-150200.68.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | ucode-intel | 20260812-160000.1.1 |
| SUSE Linux Micro 6.0 | ucode-intel | 20260812-1.1 |
| SUSE Linux Micro 6.1 | ucode-intel | 20260812-slfo.1.1_1.1 |
| SUSE Linux Micro 6.2 | ucode-intel | 20260812-160000.1.1 |
| Ubuntu 22.04 LTS | intel-microcode | no fix |
| Ubuntu 24.04 LTS | intel-microcode | no fix |
| Ubuntu 26.04 LTS | intel-microcode | no fix |
| Ubuntu 26.10 | intel-microcode | no fix |
| Ubuntu Pro 14.04 LTS | intel-microcode | no fix |
| Ubuntu Pro 16.04 LTS | intel-microcode | no fix |
| Ubuntu Pro 18.04 LTS | intel-microcode | no fix |
| Ubuntu Pro 20.04 LTS | intel-microcode | no fix |
| openSUSE Leap 16.0 | ucode-intel | 20260812-160000.1.1 |
| openSUSE Tumbleweed | ucode-intel | 20260812-1.1 |