Intel Processor Firmware February 2026 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Processors, which might allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has identified...

2026.1 IPU, Intel® Processor Firmware Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31648 Description: Improper handling of values in the microcode flow for...

Intel Processors 安全漏洞

Intel Processors are a series of processors developed by the American company Intel. There are security vulnerabilities in Intel Processors, which stem from improper numerical processing and may lead to privilege escalation...

HPESBHF05010 rev.1 - Certain HPE ProLiant DL/ML/XD, Synergy, Edgeline and Alletra Servers Using Certain Intel Processors, INTEL-SA-01314, 2025.4 IPU, Intel TDX Module Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to v1.5009-05-2025 HPE ProLiant Compute DL340 Gen12 - Prior to v1.5009-05-2025 HPE ProLiant Compute DL360 Gen12 - Prior to...

PT-2026-7299

Name of the Vulnerable Software and Affected Versions IntelR Processor Family affected versions not specified Description An issue involving improper handling of values in the microcode flow may allow for escalation of privilege. A local attacker with a privileged user account, high attack...

HPESBHF05006 rev.1 - Certain HPE ProLiant DL/ML/XD, Synergy, and Alletra Servers Using Certain Intel Processors, INTEL-SA-01401, UPLR1 - Intel Server Firmware Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to 1.6001-09-2026 HPE ProLiant Compute DL340 Gen12 - Prior to 1.6001-09-2026 HPE ProLiant Compute ML350 Gen12 - Prior to 1.6001-09-2026...

HPESBHF05008 rev.3 - Certain HPE ProLiant DL/ML/XD, Synergy, Edgeline, MicroServer, and Alletra Servers Using Certain Intel Processors, INTEL-SA-01396, 2026.1 IPU, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to v1.6001-09-2026 HPE ProLiant Compute DL340 Gen12 - Prior to v1.6001-09-2026 HPE ProLiant Compute DL360 Gen12 - Prior to...

SUSE CVE-2023-34440

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

SUSE CVE-2023-43758

Improper input validation in UEFI firmware for some IntelR processors may allow a privileged user to potentially enable escalation of privilege via local access...

SUSE CVE-2024-24582

Improper input validation in XmlCli feature for UEFI firmware for some IntelR processors may allow privileged user to potentially enable escalation of privilege via local access...

SUSE CVE-2024-28127

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

SUSE CVE-2024-29214

Improper input validation in UEFI firmware CseVariableStorageSmm for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

MiracleLinux 8 : microcode_ctl-20210216-1.20210608.1.el8 (AXSA:2021-2304:10)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2304:10 advisory. hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 hw: Vector Register Data Sampling CVE-2020-0548 hw: L1D Cache Eviction Sampling...

MiracleLinux 7 : kernel-3.10.0-1160.80.1.el7 (AXSA:2022-4024:16)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4024:16 advisory. a use-after-free in clsroute filter implementation may lead to privilege escalation CVE-2022-2588 RetBleed Arbitrary Speculative Code Execution with...

MiracleLinux 7 : microcode_ctl-2.1-73.9.el7 (AXSA:2021-1873:06)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1873:06 advisory. hw: vt-d related privilege escalation CVE-2020-24489 hw: improper isolation of shared resources in some Intel Processors CVE-2020-24511 hw: observab...

MiracleLinux 4 : microcode_ctl-1.17-33.32.0.4.AXS4 (AXSA:2021-2349:12)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2349:12 advisory. hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 hw: Vector Register Data Sampling CVE-2020-0548 hw: L1D Cache Eviction Sampling...

MiracleLinux 9 : microcode_ctl-20220207-1.20220510.1.el9 (AXBA:2022-4034:07)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXBA:2022-4034:07 advisory. - Sensitive information accessible by physical probing of JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to...

MiracleLinux 7 : microcode_ctl-2.1-53.3.el7 (AXEA:2019-4383:06)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXEA:2019-4383:06 advisory. - Insufficient access control in protected memory subsystem for IntelR SGX for 6th, 7th, 8th, 9th Generation IntelR CoreTM Processor Families; Intel...

MiracleLinux 7 : microcode_ctl-2.1-73.15.el7 (AXBA:2022-3999:06)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXBA:2022-3999:06 advisory. - Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

SUSE CVE-2025-71104

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer When advancing the target expiration for the guest's APIC timer in periodic mode, set the expiration to "now" if the target expiration is in the past...