DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Intel Prozessoren: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2025-08-12
Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Prozessor ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand herbeizuführen.
01
beschreibt (13)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-20044US | — | — | ||
Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2025-32086US | — | — | ||
Improperly implemented security check for standard in the DDRIO configuration for some Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged… | ||||
| CVE-2025-26403US | — | — | ||
Out-of-bounds write in the memory subsystem for some Intel(R) Xeon(R) 6 processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalat… | ||||
| CVE-2025-24305US | — | — | ||
Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a privileged user to potentially enable esc… | ||||
| CVE-2025-22889US | — | — | ||
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged user to potentially enable escalation of… | ||||
| CVE-2025-22853US | — | — | ||
Improper synchronization in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2025-22840US | — | — | ||
Sequence of processor instructions leads to unexpected behavior for some Intel(R) Xeon(R) 6 Scalable processors may allow an authenticated user to potentially enable escalation of… | ||||
| CVE-2025-22839US | — | — | ||
Insufficient granularity of access control in the OOB-MSM for some Intel(R) Xeon(R) 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege… | ||||
| CVE-2025-21096US | — | — | ||
Improper buffer restrictions in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2025-21090US | — | — | ||
Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of service via local access. | ||||
| CVE-2025-20613US | — | — | ||
Predictable Seed in Pseudo-Random Number Generator (PRNG) in the firmware for some Intel(R) TDX may allow an authenticated user to potentially enable information disclosure via loc… | ||||
| CVE-2025-20109US | — | — | ||
Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege… | ||||
| CVE-2025-20053US | — | — | ||
Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local acces… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Amazon Linux Security Advisory ALAS2-2025-2993 vom 2025-09-16external
- Amazon Linux Security Advisory ALAS2-2025-2994 vom 2025-09-16external
- Amazon Linux Security Advisory ALAS2-2025-3014 vom 2025-09-29external
- Intel Security Advisory INTEL-SA-01310 vom 2025-08-12external
- Debian Security Advisory DLA-4347 vom 2025-10-25external
- Debian Security Advisory DSA-6030 vom 2025-10-22external
- openSUSE Security Update OPENSUSE-SU-2025:15492-1 vom 2025-08-26external
- SUSE Security Update SUSE-SU-2025:03053-1 vom 2025-09-02external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan