CVE-2025-40181 x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forc...

EUVD-2025-93411

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...

USN-7866-1 intel-microcode vulnerabilities

Barak Gross discovered that some Intel® Xeon® processors with SGX enabled did not properly handle buffer restrictions. A local authenticated user could potentially use this issue to escalate their privileges. CVE-2025-20053 Avinash Maddy discovered that some Intel® processors did not properly...

Astra Linux – Vulnerability in Intel Microcode

An improperly implemented security check for standard in the DDRIO configuration for some IntelR XeonR 6 processors, when using IntelR SGX or IntelR TDX, may allow a privileged user to potentially enable privilege escalation through local access...

HPESBHF04936 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01245, 2025.2 IPU - Intel TDX Module Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Firmware v20251001 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-20044 |...

EUVD-2024-1087

Malicious code in bioql PyPI...

EUVD-2023-32656

Malicious code in bioql PyPI...

EUVD-2023-46202

Malicious code in bioql PyPI...

EUVD-2024-54872

Malicious code in bioql PyPI...

EUVD-2025-24417

Malicious code in bioql PyPI...

EUVD-2021-9616

Malicious code in bioql PyPI...

EUVD-2025-24430

Malicious code in bioql PyPI...

EUVD-2025-24424

Malicious code in bioql PyPI...

Security update for microcode_ctl

This update for microcodectl fixes the following issues: Intel CPU Microcode was updated to the 20250812 release bsc1248438 CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable...

CVE-2025-32086

Improperly implemented security check for standard in the DDRIO configuration for some IntelR XeonR 6 Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20044

Improper locking for some IntelR TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20044

Improper locking for some IntelR TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20044

The CVE-2025-20044 issue affects Intel® TDX Module firmware prior to version 1.5.13. The vulnerability allows a local, privileged user to potentially escalate privileges due to improper locking in the TDX Module firmware. Documented impact includes I/H (integrity high) without confidentiality imp...

CVE-2025-20044

Improper locking for some IntelR TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access...

DEBIAN-CVE-2025-32086

Improperly implemented security check for standard in the DDRIO configuration for some IntelR XeonR 6 Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...