CVE-2025-20004

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20004

CVE-2025-20004 affects Intel Xeon 6 Processor E-Cores firmware through the Alias Checking Trusted Module due to insufficient control-flow management, enabling privilege escalation from local access. Risk context is High (CVSS 3.1/4.0; local access, high privileges). Intel Intel-SA-01273 documents...

PT-2025-21064 · Intel · Intel Xeon 6 Processor E-Cores Firmware

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processor E-Cores firmware affected versions not specified Description: The issue is related to insufficient control flow management in the Alias Checking Trusted Module. This may allow a privileged user to potentially enable...

Intel Xeon 6 Processor 安全漏洞

The Intel Xeon 6 Processor is a new generation of server processors from Intel aimed at data centers, artificial intelligence AI and high performance computing HPC. The Intel Xeon 6 Processor suffers from an elevation of privilege vulnerability that stems from insufficient control flow management...

Intel® Xeon® 6 processor E-Cores with Alias Checking Trusted Module Advisory

Summary: A potential security vulnerability in Alias Checking Trusted Module for some Intel® Xeon® 6 processor Efficient-Cores E-Cores may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20004...

Intel® Xeon® 6 processor with E-cores SGX and TDX Advisory

Summary: A potential security vulnerability in Intel Xeon 6 processor with Efficient-cores E-cores may allow escalation of privilege. Intel is releasing a microcode update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-48869 Description: Improper restriction of...

Intel® Xeon® 6 processor with E-cores Advisory

Summary: Potential security vulnerability in memory controller configurations for some Intel® Xeon® 6 processor with Efficient-cores E-cores may allow escalation of privilege. Intel is releasing a firmware update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-201...

PT-2025-21062 · Intel · Intel Xeon 6

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processor with E-cores affected versions not specified Description: The issue is related to the improper restriction of software interfaces to hardware features for some IntelR XeonR 6 processor with E-cores when using IntelR...

Intel Xeon 6 Processor 访问控制错误漏洞

The Intel Xeon 6 Processor is a new generation of server processors from Intel aimed at data centers, artificial intelligence AI and high performance computing HPC. The Intel Xeon 6 Processor suffers from an improper access control vulnerability that stems from improper access control of the memo...

PT-2025-21093 · Intel · Intel Xeon 6

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processor with E-cores affected versions not specified Description: The issue is related to improper access control in the memory controller configurations for some IntelR XeonR 6 processors with E-cores. This may allow a...

Intel Xeon 6 Processor 安全漏洞

Intel Xeon 6 Processor is a family of chips from the U.S.-based Intel Corporation Intel. A security vulnerability exists in Intel Xeon 6 Processor that stems from an improperly restricted hardware function interface, which could allow a privileged user to elevate privileges through local access...

2024.1 IPU - Intel® Xeon® Processor Advisory

Summary: A potential security vulnerability in some 3rd and 4th Generation Intel® Xeon® Processors when using Intel® Software Guard Extensions SGX or Intel® Trust Domain Extensions TDX may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability...

The vulnerability of Intel Xeon processor microprogramming software lies in the insufficient checking of unusual or exceptional states, which allows attackers to increase their privileges.

The vulnerability of Intel Xeon processor microprogramming software is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow attackers to gain enhanced privileges...

Security update for microcode_ctl

This update for microcodectl fixes the following issues: CVE-2024-31068: Improper Finite State Machines FSMs in Hardware Logic for some Intel Processors may allow privileged user to potentially enable denial of service via local access. bsc1237096 CVE-2024-36293: A potential security vulnerabilit...

RockyLinux 9 : microcode_ctl (RLSA-2024:9401)

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2024:9401 advisory. kernel: local privilege escalation on Intel microcode on IntelR XeonR CVE-2023-22655 kernel: Local information disclosure on IntelR AtomR processors...

The vulnerability of microprogrammed software in 3rd Generation Intel Xeon Scalable Processors allows a hacker to trigger a service failure.

The vulnerability of microprogrammed software in 3rd generation Intel Xeon Scalable processors is related to the lack of coordination between independent representations of the overall state. Exploiting this vulnerability can allow attackers to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2022-33972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect calculation in microcode keying mechanism for some 3rd Generation IntelR XeonR Scalable Processors may allow a privileged user to potentially enable...

Linux Distros Unpatched Vulnerability : CVE-2023-43490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect calculation in microcode keying mechanism for some IntelR XeonR D Processors with IntelR SGX may allow a privileged user to potentially enable...

Linux Distros Unpatched Vulnerability : CVE-2022-33196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may...

Linux Distros Unpatched Vulnerability : CVE-2022-21131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control for some IntelR XeonR Processors may allow an authenticated user to potentially enable information disclosure via local access...