CVE-2025-31648
Low · 3.9CVSS
3.9
EPSS
0.2%
Published
Feb 10, 2026
CISA due date
—
The record
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:9 | microcode | 0 | 0.20260210-1.mga9.nonfree |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise Micro 5.2 | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise Micro 5.3 | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise Micro 5.4 | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise Micro 5.5 | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | ucode-intel | 0 | 20260210-150200.62.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | ucode-intel | 0 | 20260210-150200.62.1 |
| openSUSE:Leap 15.6 | ucode-intel | 0 | 20260210-150200.62.1 |
| openSUSE:Leap 16.0 | ucode-intel | 0 | 20260210-160000.1.1 |
| openSUSE:Tumbleweed | ucode-intel | 0 | 20260210-1.1 |
Related vulnerabilities
- CVE-2024-23918 Improper conditions check in some Intel(R) Xeon(R) processor memory controller… Also affects microcode
- CVE-2024-21853 Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th… Also affects microcode
- CVE-2024-21820 Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller… Also affects microcode
- CVE-2024-24968 Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may… Also affects microcode
- CVE-2024-23984 Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a… Also affects microcode
- CVE-2024-25939 Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable… Also affects microcode
- CVE-2024-24980 Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R)… Also affects microcode
- CVE-2024-24853 Incorrect behavior order in transition between executive monitor and SMI transfer monitor… Also affects microcode