Back to the CVE list
CVE-2025-31936

Vulnerability in N/a Intel(R) Xeon(R) 6 Processors When Using Intel(R) TDX

CVSS score

7.0

EPSS probability

%0.1

Risk score

0.0

Published

2 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-31936 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-31936 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1n/aIntel(R) Xeon(R) 6 processors when using Intel(R) TDX View
2intelxeon 6337p firmware View
3intelxeon 6337p View
4intelxeon 6349p firmware View
5intelxeon 6349p View
6intelxeon 6353p firmware View
7intelxeon 6353p View
8intelxeon 6357p firmware View
9intelxeon 6357p View
10intelxeon 6369p firmware View
11intelxeon 6369p View
12intelxeon 6377p firmware View
13intelxeon 6377p View
14intelxeon 6503p firmware View
15intelxeon 6503p View
16intelxeon 6503p-b firmware View
17intelxeon 6503p-b View
18intelxeon 6505p firmware View
19intelxeon 6505p View
20intelxeon 6507p firmware View
21intelxeon 6507p View
22intelxeon 6511p firmware View
23intelxeon 6511p View
24intelxeon 6513p-b firmware View
25intelxeon 6513p-b View
26intelxeon 6515p firmware View
27intelxeon 6515p View
28intelxeon 6516p-b firmware View
29intelxeon 6516p-b View
30intelxeon 6517p firmware View
31intelxeon 6517p View
32intelxeon 6518p-b firmware View
33intelxeon 6518p-b View
34intelxeon 6520p firmware View
35intelxeon 6520p View
36intelxeon 6521p firmware View
37intelxeon 6521p View
38intelxeon 6523p-b firmware View
39intelxeon 6523p-b View
40intelxeon 6527p firmware View
41intelxeon 6527p View
42intelxeon 6530p firmware View
43intelxeon 6530p View
44intelxeon 6532p-b firmware View
45intelxeon 6532p-b View
46intelxeon 6533p-b firmware View
47intelxeon 6533p-b View
48intelxeon 6543p-b firmware View
49intelxeon 6543p-b View
50intelxeon 6544p-b firmware View
51intelxeon 6544p-b View
52intelxeon 6546p-b firmware View
53intelxeon 6546p-b View
54intelxeon 6548p-b firmware View
55intelxeon 6548p-b View
56intelxeon 6553p-b firmware View
57intelxeon 6553p-b View
58intelxeon 6556p-b firmware View
59intelxeon 6556p-b View
60intelxeon 6563p-b firmware View
61intelxeon 6563p-b View
62intelxeon 6706p-b firmware View
63intelxeon 6706p-b View
64intelxeon 6714p firmware View
65intelxeon 6714p View
66intelxeon 6716p-b firmware View
67intelxeon 6716p-b View
68intelxeon 6718p-b firmware View
69intelxeon 6718p-b View
70intelxeon 6724p firmware View
71intelxeon 6724p View
72intelxeon 6725p firmware View
73intelxeon 6725p View
74intelxeon 6726p-b firmware View
75intelxeon 6726p-b View
76intelxeon 6728p firmware View
77intelxeon 6728p View
78intelxeon 6730p firmware View
79intelxeon 6730p View
80intelxeon 6731p firmware View
81intelxeon 6731p View
82intelxeon 6732p firmware View
83intelxeon 6732p View
84intelxeon 6736p firmware View
85intelxeon 6736p View
86intelxeon 6737p firmware View
87intelxeon 6737p View
88intelxeon 6738p firmware View
89intelxeon 6738p View
90intelxeon 6740p firmware View
91intelxeon 6740p View
92intelxeon 6741p firmware View
93intelxeon 6741p View
94intelxeon 6745p firmware View
95intelxeon 6745p View
96intelxeon 6747p firmware View
97intelxeon 6747p View
98intelxeon 6748p firmware View
99intelxeon 6748p View
100intelxeon 6756p-b firmware View
101intelxeon 6756p-b View
102intelxeon 6760p firmware View
103intelxeon 6760p View
104intelxeon 6761p firmware View
105intelxeon 6761p View
106intelxeon 6766p-b firmware View
107intelxeon 6766p-b View
108intelxeon 6767p firmware View
109intelxeon 6767p View
110intelxeon 6768p firmware View
111intelxeon 6768p View
112intelxeon 6768p-b firmware View
113intelxeon 6768p-b View
114intelxeon 6774p firmware View
115intelxeon 6774p View
116intelxeon 6776p firmware View
117intelxeon 6776p View
118intelxeon 6776p-b firmware View
119intelxeon 6776p-b View
120intelxeon 6781p firmware View
121intelxeon 6781p View
122intelxeon 6787p firmware View
123intelxeon 6787p View
124intelxeon 6788p firmware View
125intelxeon 6788p View
126intelxeon 6944p firmware View
127intelxeon 6944p View
128intelxeon 6952p firmware View
129intelxeon 6952p View
130intelxeon 6960p firmware View
131intelxeon 6960p View
132intelxeon 6962p firmware View
133intelxeon 6962p View
134intelxeon 6972p firmware View
135intelxeon 6972p View
136intelxeon 6978p firmware View
137intelxeon 6978p View
138intelxeon 6979p firmware View
139intelxeon 6979p View
140intelxeon 6980p firmware View
141intelxeon 6980p View
142intelxeon 6315p firmware View
143intelxeon 6315p View
144intelxeon 6325p firmware View
145intelxeon 6325p View
146intelxeon 6333p firmware View
147intelxeon 6333p View
148debianintel-microcode (sid) View
149debianintel-microcode (forky) View
150debianintel-microcode (trixie) View
151debianintel-microcode (bookworm) View
152debianintel-microcode (bullseye) View
Total affected vendors: 3|Products: 152

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.0CVSS V4_0HIGHCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:NCVE CNA
7.0CVSS V40HIGHCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD
5.7CVSS V31MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:NNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-31936 is associated with the following CWEs:

CWE-1260: Common Weakness Enumeration Entry CWE-1260

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-31936 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.htmlvendor-advisoryhttps://security-tracker.debian.org/tracker/CVE-2025-31936vendor-advisory

CVSS Vector Radar Chart

7.0 / 10
Attack VectorLocalComplexityHighPrivilegesHighUser Interact.NoneConfidentialityHighIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Attack VectorLocal
Attack ComplexityHigh
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)High
Integrity (Bütünlük)None
Availability (Erişilebilirlik)None

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

N
n/a logo
n/a
I
intel logo
intel
D
debian logo
debian

Weakness Type (CWE & CAPEC)

CWE-1260

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2025-31936"