Summary
Sergiu Ghetie discovered that some Intel® processors did not properly
handle values in the microcode flow. A local authenticated user could
potentially use this issue to escalate their privileges.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | intel-microcode | 3.20260210.0ubuntu0.22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | intel-microcode | 3.20260210.0ubuntu0.24.04.1 |
| Ubuntu · 25.10 | intel-microcode | 3.20260210.0ubuntu0.25.10.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | intel-microcode | 3.20260210.0ubuntu0.16.04.1+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | intel-microcode | 3.20260210.0ubuntu0.18.04.1+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | intel-microcode | 3.20260210.0ubuntu0.20.04.1+esm1 |
References
-
report
https://ubuntu.com/security/CVE-2025-31648