TencentOS Server 3: microcode_ctl (TSSA-2026:1116)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1116 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2025-31938: Insufficient Granularity of Access Control

Insufficient granularity of access control in some subsystem for some IntelR XeonR 6 Scalable processors with IntelR TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentiall...

CVE-2025-31936: Improper Handling of Overlap Between Protected Memory Ranges

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2025-22840: Sequence of Processor Instructions Leads to Unexpected Behavior

Sequence of processor instructions leads to unexpected behavior for some IntelR XeonR 6 Scalable processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-26403: Out-of-bounds Write

Out-of-bounds write in the memory subsystem for some IntelR XeonR 6 processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-22839: Insufficient Granularity of Access Control

Insufficient granularity of access control in the OOB-MSM for some IntelR XeonR 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access...

CVE-2025-32086: Improperly Implemented Security Check for Standard

Improperly implemented security check for standard in the DDRIO configuration for some IntelR XeonR 6 Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-22889: Improper Handling of Overlap Between Protected Memory Ranges

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20100: Improper Access Control

Improper access control in the memory controller configurations for some IntelR XeonR 6 processor with E-cores may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-48869: Improper Restriction of Software Interfaces to Hardware Features

Improper restriction of software interfaces to hardware features for some IntelR XeonR 6 processor with E-cores when using IntelR Trust Domain Extensions IntelR TDX or IntelR Software Guard Extensions IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local...

CVE-2025-20004: Insufficient Control Flow Management

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...