Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20558)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20558 advisory. 6.12.0-103.40.4.2.el10uek - x86/vmscape: Warn when STIBP is disabled with SMT Pawan Gupta Orabug: 38343659 - x86/bugs: Move cpubugssmtupdate down Pawan...

PT-2025-46402

Name of the Vulnerable Software and Affected Versions IntelR NPU Drivers affected versions not specified Description A protection mechanism failure exists in some IntelR NPU Drivers within Ring 3. This can allow a denial of service. An unprivileged software adversary with an authenticated user an...

CVE-2025-27246: Incorrect Default Permissions

Incorrect default permissions for the IntelR Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable local code execution...

PT-2025-46393

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description The software contains an improper privilege management issue within Ring 3 User Applications. An unprivileged software adversary with an authenticated user and a low...

PT-2025-46379

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description An uncontrolled search path exists in some IntelR CIP software. This issue, occurring within Ring 3 User Applications, may allow an escalation of privilege. A local,...

CVE-2025-24491: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR KillerTM Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable...

CVE-2025-35967: Out-of-bounds Read

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...

PT-2025-46400

Name of the Vulnerable Software and Affected Versions IntelR One Boot Flash Update IntelR OFU versions prior to 14.1.31 Description An uncontrolled search path issue exists in some IntelR One Boot Flash Update IntelR OFU software. This issue, present within Ring 3: User Applications, may allow an...

Intel® Distribution for Python Software Installer Advisory

Summary: A potential security vulnerability for some Intel® Distribution for Python software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-30182 Description: Uncontrolled search pa...

Intel® PresentMon Software Advisory

Summary: Potential security vulnerabilities for some Intel® PresentMon software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-30518 Description: Incorrect default...

Assistive Context-Aware Toolkit (ACAT) Software Advisory

Summary: A potential security vulnerability in some Assistive Context-Aware Toolkit ACAT software maintained by Intel may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-27725 Description: Time-of-check...

Intel® SEL Viewer Utility Software Advisory

Summary: A potential security vulnerability for the Intel® System Event Log Intel® SEL Viewer Utility software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® SEL Viewer Utility...

Intel® Server Configuration Utility Software Advisory

Summary: A potential security vulnerability in some Intel® Server Configuration Utility software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24918 Description: Improper link resolution befo...

Intel® PROSet/Wireless WiFi Software Advisory

Summary: Potential security vulnerabilities for some Intel® PROSet/Wireless WiFi Software may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-35971 Description: Out-of-bounds write for some Intel®...

Intel® MPI Library Software Advisory

Summary: A potential security vulnerability in some Intel® MPI Library software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-35972 Description: Uncontrolled search path for the Intel MPI...

Intel UEFI Server Firmware Advisory

Summary: A potential security vulnerability for some Intel reference platforms may allow escalation of privilege or denial of service. Intel is releasing UEFI reference updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-30185 Description: Active debug code fo...

Intel® NPU Driver Advisory

Summary: Potential security vulnerabilities for some Intel® NPU Drivers may allow denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-26402 Description: Protection mechanism failure fo...

Intel® CIP Software Advisory

Summary: Potential security vulnerabilities in some Intel® Computing Improvement Program Intel® CIP software may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-24838...

Intel® VTune™ Profiler Software Advisory

Summary: A potential security vulnerability for some Intel® VTune™ Profiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20056 Description: Improper input validation for some Intel...

ITT API Software Advisory

Summary: A potential security vulnerability in some Instrumentation and Tracing Technology API ITT API software may allow escalation of privilage. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31931 Description: Uncontrolled...