Skip to content
OpenAdvisories
Medium · 6.8 CVE-2025-35979 EUVD-2025-209791GHSA-f5vw-x3gp-vr4c

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R)…

Published May 12, 2026 · Updated May 12, 2026 · Assigned by intel

Description

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-root (guest) operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.

Affected products

VendorProductAffectedFixed
— Intel(R) Processors See references —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 intel-microcode 3.20260925.1 —
Debian 13 intel-microcode No fix yet —
Debian 12 intel-microcode No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 intel-microcode No fix yet —
Ubuntu 26.04 LTS intel-microcode No fix yet —
Ubuntu 25.10 intel-microcode No fix yet —
Ubuntu 24.04 LTS intel-microcode No fix yet —
Ubuntu 22.04 LTS intel-microcode No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS intel-microcode No fix yet —
Ubuntu Pro 18.04 LTS intel-microcode No fix yet —
Ubuntu Pro 16.04 LTS intel-microcode No fix yet —
Ubuntu Pro 14.04 LTS intel-microcode No fix yet —
ReleasePackageFixed inAdvisory
SLES 15 SP7 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
SLES 15 SP6 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
SLES 15 SP5 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
SLES 15 SP4 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
SLES 12 SP5 ucode-intel 20260512-161.1 SUSE-SU-2026:2981-1
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 11 SP4 microcode_ctl 1.17-102.83.95.1 SUSE-SU-2026:3124-1
SLES for SAP 16.0 ucode-intel 20260812-160000.1.1 SUSE-SU-2026:23602-1
SLES for SAP 15 SP6 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
SLES for SAP 15 SP5 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
SLES for SAP 15 SP4 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
SLES 16.0 ucode-intel 20260812-160000.1.1 SUSE-SU-2026:23602-1
SLE Micro 6.2 ucode-intel 20260812-160000.1.1 SUSE-SU-2026:23459-1
SLE Micro 5.5 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
SLE Micro 5.4 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
SLE Micro 5.3 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
SLE HPC 15 SP5 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
SLE HPC 15 SP4 ucode-intel 20260512-150200.65.1 SUSE-SU-2026:2963-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed ucode-intel 20260512-1.1 openSUSE-SU-2026:10783-1
openSUSE Leap 16.0 ucode-intel 20260812-160000.1.1 openSUSE-SU-2026:21736-1
ReleasePackageFixed inAdvisory
Alpine v3.24 intel-ucode 20260512-r0 —
Alpine v3.23 intel-ucode 20260512-r0 —
Alpine v3.22 intel-ucode 20260512-r0 —
Alpine v3.21 intel-ucode 20260512-r0 —
Alpine v3.20 intel-ucode 20260512-r0 —

Advisories 8

References