CVE-2025-31938

The record

Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.

Affected packages

Related vulnerabilities

• CVE-2026-96372 Insufficient Granularity of Access Control vulnerability in Drupal Webform allows… CWE-1220
• CVE-2026-78230 AshAi exposes Ash read actions to language-model tool calls. CWE-1220
• CVE-2026-78216 AshLua exposes Ash read actions to Lua scripts run through an eval action. CWE-1220
• CVE-2026-15431 A potential security vulnerability has been identified in the HP Support Assistant for… CWE-1220
• CVE-2026-40145 A vulnerability exists in the interaction between a Endpoint Privilege Management… CWE-1220
• CVE-2026-50502 Insufficient granularity of access control in Windows Event Logging Service allows an… CWE-1220
• CVE-2026-50405 Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an… CWE-1220
• CVE-2026-56155 Insufficient granularity of access control in Active Directory Federation Services (AD… CWE-1220