Intel Prozessoren: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 10

• High 7.5
  CVE-2025-20083

  Improper authentication in the firmware for the Intel(R) Slim Bootloader may allow a privileged user to potentially ena…

  May 13, 2025
• High 7.5
  CVE-2025-20100

  Improper access control in the memory controller configurations for some Intel(R) Xeon(R) 6 processor with E-cores may …

  May 13, 2025
• High 7.2
  CVE-2025-20004

  Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon(R) 6 processor E-Cores…

  May 13, 2025
• Medium 6.5
  CVE-2025-20054

  Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to pot…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  May 13, 2025
• Medium 6.5
  CVE-2025-20103

  Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated use…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  May 13, 2025
• Medium 6.1
  CVE-2024-48869

  Improper restriction of software interfaces to hardware features for some Intel(R) Xeon(R) 6 processor with E-cores whe…

  May 13, 2025
• Medium 5.7
  CVE-2025-20047

  Improper locking in the Intel(R) Integrated Connectivity I/O interface (CNVi) for some Intel(R) Core™ Ultra Processors …

  May 13, 2025
• Medium 5.6
  CVE-2024-43420

  Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executi…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  May 13, 2025
• Medium 5.6
  CVE-2024-45332

  Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executi…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  May 13, 2025
• Medium 5.6
  CVE-2025-20623

  Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executi…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  May 13, 2025

Revision history

1. 2026-05-05 #19

   Neue Updates von Dell aufgenommen

2. 2025-10-13 #18

   Neue Updates von Dell aufgenommen

3. 2025-09-16 #17

   Neue Updates von Amazon aufgenommen

4. 2025-09-10 #16

   Neue Updates von Oracle Linux aufgenommen

5. 2025-08-31 #15

   Neue Updates von Dell aufgenommen

6. 2025-08-13 #14

   Neue Updates von Dell aufgenommen

7. 2025-07-31 #13

   Referenz(en) aufgenommen:

8. 2025-07-08 #12

   Neue Updates von LENOVO aufgenommen

9. 2025-06-19 #11

   Neue Updates von SUSE aufgenommen

10. 2025-06-17 #10

    Neue Updates von SUSE aufgenommen

11. 2025-05-29 #9

    Neue Updates von SUSE, Amazon und HP aufgenommen

12. 2025-05-27 #8

    Neue Updates von HP und Ubuntu aufgenommen

13. 2025-05-26 #7

    Neue Updates von Fedora aufgenommen

14. 2025-05-25 #6

    Neue Updates von Debian aufgenommen

15. 2025-05-22 #5

    Neue Updates von SUSE aufgenommen

16. 2025-05-18 #4

    Neue Updates von Debian, SUSE und openSUSE aufgenommen

17. 2025-05-15 #3

    Referenz(en) aufgenommen: EUVD-2025-14567

18. 2025-05-14 #2

    PoC aufgenommen

19. 2025-05-13 #1

    Initiale Fassung

References

• Intel Core Ultra Processors CNVi Advisory vom 2025-05-13
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01180.html
• 2025.2 IPU, Intel Processor Advisory vom 2025-05-13
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html
• 2025.2 IPU - Intel Processor Indirect Branch Predictor Advisory vom 2025-05-13
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html
• Intel Xeon 6 processor with E-cores SGX and TDX Advisory vom 2025-05-13
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01268.html
• Intel Xeon 6 processor E-Cores with Alias Checking Trusted Module Advisory vom 2025-05-13
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01273.html
• Intel Xeon 6 processor with E-cores Advisory vom 2025-05-13
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01278.html
• Intel Slim Bootloader Advisory vom 2025-05-13
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01290.html
• Google Cloud Platform Security Bulletin GCP-2025-025 vom 2025-05-14
  https://cloud.google.com/support/bulletins#gcp-2025-025
• HPE Security Bulletin HPESBHF04858 rev.1 vom 2025-05-13
  https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04858en_us&docLocale=en_US
• Dell Security Advisory DSA-2025-048 vom 2025-05-13
  https://www.dell.com/support/kbdoc/de-de/000272449/dsa-2025-048
• Dell Security Advisory DSA-2025-156 vom 2025-05-13
  https://www.dell.com/support/kbdoc/de-de/000320934/dsa-2025-156-security-update-for-dell-poweredge-server-for-intel-2025-security-advisories-2025-2-ipu
• HPE Security Bulletin HPESBHF04860 rev.1 vom 2025-05-13
  https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04860en_us&docLocale=en_US
• Lenovo Security Advisory LEN-195071 vom 2025-05-14
  https://support.lenovo.com/us/en/product_security/LEN-195071
• PoC für CVE-2024-45332 vom 2025-05-14
  https://comsec.ethz.ch/research/microarch/branch-privilege-injection/
• Debian Security Advisory DLA-4170 vom 2025-05-18
  https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html
• SUSE Security Update SUSE-SU-2025:1567-1 vom 2025-05-16
  https://lists.suse.com/pipermail/sle-security-updates/2025-May/020842.html
• openSUSE Security Update OPENSUSE-SU-2025:15093-1 vom 2025-05-16
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IDMNMRHOEJBKOC4ZPMYVNMKT2SGRVB7Q/
• SUSE Security Update SUSE-SU-2025:01650-1 vom 2025-05-22
  https://lists.suse.com/pipermail/sle-security-updates/2025-May/020877.html
• SUSE Security Update SUSE-SU-2025:01651-1 vom 2025-05-22
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6G75W2R3WRICVZLBNWSHQ44DL3TMTL6V/
• Debian Security Advisory DSA-5924 vom 2025-05-23
  https://lists.debian.org/debian-security-announce/2025/msg00087.html
• Fedora Security Advisory FEDORA-2025-ABF317121E vom 2025-05-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-abf317121e
• Fedora Security Advisory FEDORA-2025-E5D3928F2C vom 2025-05-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-e5d3928f2c
• HP Security Bulletin HPSBHF04024 vom 2025-04-11
  https://support.hp.com/de-de/document/ish_12559622-12559652-16/HPSBHF04024
• Ubuntu Security Notice USN-7535-1 vom 2025-05-27
  https://ubuntu.com/security/notices/USN-7535-1
• SUSE Security Update SUSE-SU-2025:01651-2 vom 2025-05-29
  https://lists.suse.com/pipermail/sle-security-updates/2025-May/020928.html
• Amazon Linux Security Advisory ALAS-2025-2872 vom 2025-05-29
  https://alas.aws.amazon.com/AL2/ALAS-2025-2872.html
• HP Security Bulletin HPSBHF04026 vom 2025-04-11
  https://support.hp.com/us-en/document/ish_12568527-12568549-16/HPSBHF04026
• SUSE Security Update SUSE-SU-2025:20410-1 vom 2025-06-17
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021549.html
• SUSE Security Update SUSE-SU-2025:20424-1 vom 2025-06-20
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021589.html
• Lenovo Security Advisory LEN-200962 vom 2025-07-09
  https://support.lenovo.com/us/en/product_security/LEN-200962
• Dell Security Advisory DSA-2025-324 vom 2025-08-14
  https://www.dell.com/support/kbdoc/000355904
• Dell Security Advisory DSA-2025-339 vom 2025-09-01
  https://www.dell.com/support/kbdoc/de-de/000362542/dsa-2025-339-security-update-for-dell-avamar-data-store-gen5a-multiple-third-party-component-vulnerabilities
• Oracle Linux Security Advisory ELSA-2025-10991 vom 2025-09-10
  https://linux.oracle.com/errata/ELSA-2025-10991.html
• Amazon Linux Security Advisory ALAS2-2025-2994 vom 2025-09-16
  https://alas.aws.amazon.com/AL2/ALAS2-2025-2994.html
• Dell Security Advisory DSA-2025-166 vom 2025-10-14
  https://www.dell.com/support/kbdoc/de-de/000363693/dsa-2025-166-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities
• Dell Security Advisory DSA-2026-127 vom 2026-05-06
  https://www.dell.com/support/kbdoc/de-de/000461405/dsa-2026-127-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities