{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Intel RealSense SDK software versions ant\u00e9rieures \u00e0 2.56.2.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Advisor standalone component software software versions ant\u00e9rieures \u00e0 2024.2.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Server Board D50DNP et M50FCP UEFI versions ant\u00e9rieures \u00e0 R01.02.0003.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Ethernet Connections Boot Utility versions ant\u00e9rieures \u00e0 29.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "9th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "OpenVINO model server software maintained by Intel versions ant\u00e9rieures \u00e0 2024.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Level Zero software versions ant\u00e9rieures \u00e0 1.5.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "NVM Update Utility for Intel Ethernet Network Adapter E810 Series versions ant\u00e9rieures \u00e0 4.6.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Arc Pro graphics versions ant\u00e9rieures \u00e0 32.0.101.6303.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Graphics Driver software versions ant\u00e9rieures \u00e0 32.0.101.6083_101.5736.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Base Toolkit versions ant\u00e9rieures \u00e0 2024.2.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Atom, Pentium et Celeron processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Iris Xe Dedicated Graphics family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Edge Orchestrator software versions ant\u00e9rieures \u00e0 24.11 for Intel Tiber Edge Platform.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Endurance Gaming Mode software versions ant\u00e9rieures \u00e0 1.5.651.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel QAT software versions ant\u00e9rieures \u00e0 2.3.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Network Adapter Driver for Microsoft Windows 11 versions ant\u00e9rieures \u00e0 29.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "13th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "12th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "FPGA Support Package for the Intel oneAPI DPC++/C++ Compiler software for Windows versions ant\u00e9rieures \u00e0 2025.0.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "7th-10th Gen Intel Core processor family versions ant\u00e9rieures \u00e0 31.0.101.2134.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Atom, Pentium et Celeron processors versions ant\u00e9rieures \u00e0 31.0.101.2134.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Arc Graphics family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Data Center GPU Flex Series versions ant\u00e9rieures \u00e0 32.0.101.6314.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "10th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Graphics Windows DCH driver software versions ant\u00e9rieures \u00e0 30.0.100.9955.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel 7th-10th Gen Processor Graphics for Windows driver versions ant\u00e9rieures \u00e0 31.0.101.2130:",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Data Center GPU Flex Series for Windows driver versions ant\u00e9rieures \u00e0 31.0.101.4314:\n\nIntel Data Center GPU Flex 140\nIntel Data Center GPU Flex 170\n",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Administrative Tools for Intel Network Adapters versions ant\u00e9rieures \u00e0 29.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Arc et Iris Xe Graphics for Windows driver versions ant\u00e9rieures \u00e0 32.0.101.6083/32.0.101.5736:",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Graphics Drivers pour Intel Arc graphics versions ant\u00e9rieures \u00e0 32.0.101.6449/32.0.101.6256.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel 6th Gen Processor Graphics driver toutes versions.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Core Ultra processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "11th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "8th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Graphics Windows DCH driver software versions ant\u00e9rieures \u00e0 30.0.101.1191.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Ethernet Adapter Complete Driver Pack versions ant\u00e9rieures \u00e0 29.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "7th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Gaudi software installer versions ant\u00e9rieures \u00e0 before 1.18.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI DPC++/C++ Compiler software versions ant\u00e9rieures \u00e0 2025.0.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Arc\u2122 Pro A-series graphics versions ant\u00e9rieures \u00e0 30.0.101.1729.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Core Processor with Intel Hybrid Technology",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Simics Package Manager software versions ant\u00e9rieures \u00e0 1.12.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "14th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Pentium et Celeron processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Arc\u2122 A-Series graphics versions ant\u00e9rieures \u00e0 31.0.101.3277.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Iris Xe graphics versions ant\u00e9rieures \u00e0 32.0.101.6449/32.0.101.6256.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-20618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20618"
    },
    {
      "name": "CVE-2025-20008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20008"
    },
    {
      "name": "CVE-2024-31150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-31150"
    },
    {
      "name": "CVE-2025-20041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20041"
    },
    {
      "name": "CVE-2025-20043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20043"
    },
    {
      "name": "CVE-2025-21099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21099"
    },
    {
      "name": "CVE-2025-22892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22892"
    },
    {
      "name": "CVE-2025-20084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20084"
    },
    {
      "name": "CVE-2025-20022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20022"
    },
    {
      "name": "CVE-2025-23233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-23233"
    },
    {
      "name": "CVE-2025-20095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20095"
    },
    {
      "name": "CVE-2025-20101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20101"
    },
    {
      "name": "CVE-2024-45067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45067"
    },
    {
      "name": "CVE-2024-43420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
    },
    {
      "name": "CVE-2025-22848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22848"
    },
    {
      "name": "CVE-2025-20039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20039"
    },
    {
      "name": "CVE-2025-20006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20006"
    },
    {
      "name": "CVE-2025-22843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22843"
    },
    {
      "name": "CVE-2025-21094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21094"
    },
    {
      "name": "CVE-2025-20616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20616"
    },
    {
      "name": "CVE-2025-22446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22446"
    },
    {
      "name": "CVE-2024-48869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-48869"
    },
    {
      "name": "CVE-2024-28954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28954"
    },
    {
      "name": "CVE-2024-39833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39833"
    },
    {
      "name": "CVE-2025-20003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20003"
    },
    {
      "name": "CVE-2025-20629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20629"
    },
    {
      "name": "CVE-2024-21829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21829"
    },
    {
      "name": "CVE-2025-20018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20018"
    },
    {
      "name": "CVE-2025-22895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22895"
    },
    {
      "name": "CVE-2024-43101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43101"
    },
    {
      "name": "CVE-2025-20013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20013"
    },
    {
      "name": "CVE-2025-22844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22844"
    },
    {
      "name": "CVE-2025-20057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20057"
    },
    {
      "name": "CVE-2025-21100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21100"
    },
    {
      "name": "CVE-2024-47550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47550"
    },
    {
      "name": "CVE-2024-39758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39758"
    },
    {
      "name": "CVE-2024-21859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21859"
    },
    {
      "name": "CVE-2025-20612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20612"
    },
    {
      "name": "CVE-2025-20046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20046"
    },
    {
      "name": "CVE-2024-47800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47800"
    },
    {
      "name": "CVE-2025-24308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24308"
    },
    {
      "name": "CVE-2025-20611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20611"
    },
    {
      "name": "CVE-2024-28047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28047"
    },
    {
      "name": "CVE-2025-20082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20082"
    },
    {
      "name": "CVE-2025-20054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20054"
    },
    {
      "name": "CVE-2025-20034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20034"
    },
    {
      "name": "CVE-2025-20047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20047"
    },
    {
      "name": "CVE-2024-31073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-31073"
    },
    {
      "name": "CVE-2025-20079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20079"
    },
    {
      "name": "CVE-2025-20052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20052"
    },
    {
      "name": "CVE-2024-29222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29222"
    },
    {
      "name": "CVE-2025-21081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21081"
    },
    {
      "name": "CVE-2025-22448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22448"
    },
    {
      "name": "CVE-2025-20015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20015"
    },
    {
      "name": "CVE-2025-20083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20083"
    },
    {
      "name": "CVE-2025-20026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20026"
    },
    {
      "name": "CVE-2025-20624",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20624"
    },
    {
      "name": "CVE-2025-20103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20103"
    },
    {
      "name": "CVE-2024-46895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46895"
    },
    {
      "name": "CVE-2024-36292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36292"
    },
    {
      "name": "CVE-2025-20071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20071"
    },
    {
      "name": "CVE-2025-20031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20031"
    },
    {
      "name": "CVE-2025-20100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20100"
    },
    {
      "name": "CVE-2025-20104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20104"
    },
    {
      "name": "CVE-2024-31157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-31157"
    },
    {
      "name": "CVE-2025-20108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20108"
    },
    {
      "name": "CVE-2025-20623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
    },
    {
      "name": "CVE-2025-20076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20076"
    },
    {
      "name": "CVE-2024-28036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28036"
    },
    {
      "name": "CVE-2024-45333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45333"
    },
    {
      "name": "CVE-2024-47795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47795"
    },
    {
      "name": "CVE-2025-20032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20032"
    },
    {
      "name": "CVE-2025-20004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20004"
    },
    {
      "name": "CVE-2025-20009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20009"
    },
    {
      "name": "CVE-2024-31155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-31155"
    },
    {
      "name": "CVE-2025-20062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20062"
    },
    {
      "name": "CVE-2024-45332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
    },
    {
      "name": "CVE-2024-45371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45371"
    },
    {
      "name": "CVE-2025-20030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20030"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0402",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-05-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Intel. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Intel",
  "vendor_advisories": [
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01268",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01268.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01216",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01216.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01271",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01271.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01290",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01290.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01252",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01252.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01274",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01274.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01293",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01293.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01305",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01305.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01263",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01263.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01244",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01254",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01254.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01270",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01272",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01272.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01297",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01297.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01259",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01278",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01278.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01239",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01273",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01273.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01180",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01180.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01295",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01295.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01253",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01243",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01243.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01269",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01269.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01247",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01294",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01294.html"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Sterling External Authentication Server versions 6.1.0.x ant\u00e9rieures \u00e0 6.1.0.3 GA",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Secure Proxy versions 6.1.0.x ant\u00e9rieures \u00e0 6.1.0.2 GA",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Secure Proxy versions 6.2.0.x ant\u00e9rieures \u00e0 6.2.0.2 GA",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct pour Microsoft Windows versions 6.3.x ant\u00e9rieures \u00e0 6.3.0.6",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct pour Microsoft Windows versions 6.4.x ant\u00e9rieures \u00e0 6.4.0.3",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 Bridge versions ant\u00e9rieures \u00e0 1.1.1",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Cognos Command Center versions 10.2.4.1 et 10.2.5 ant\u00e9rieures \u00e0 10.2.5 FP1 IF1",
      "product": {
        "name": "Cognos Dashboards",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar SIEM versions 7.5.0 ant\u00e9rieures \u00e0 QRadar 7.5.0 UP13 IF01",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar Incident Forensics versions 7.5.0 ant\u00e9rieures \u00e0 QIF 7.5.0 UP13 IF01",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "WebSphere Remote Server versions 9.1, 8.0 et 8.5 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Cognos Dashboards on Cloud Pak for Data versions 5.x ant\u00e9rieures \u00e0 5.2.1",
      "product": {
        "name": "Cognos Dashboards",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-6531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6531"
    },
    {
      "name": "CVE-2025-4447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4447"
    },
    {
      "name": "CVE-2024-21144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21144"
    },
    {
      "name": "CVE-2025-24789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24789"
    },
    {
      "name": "CVE-2022-50020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-50020"
    },
    {
      "name": "CVE-2025-47944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47944"
    },
    {
      "name": "CVE-2024-50349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50349"
    },
    {
      "name": "CVE-2025-46835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-46835"
    },
    {
      "name": "CVE-2024-57980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-57980"
    },
    {
      "name": "CVE-2024-43420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
    },
    {
      "name": "CVE-2025-49794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49794"
    },
    {
      "name": "CVE-2025-22004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22004"
    },
    {
      "name": "CVE-2025-27614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27614"
    },
    {
      "name": "CVE-2022-49111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49111"
    },
    {
      "name": "CVE-2025-1470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1470"
    },
    {
      "name": "CVE-2022-49058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49058"
    },
    {
      "name": "CVE-2025-24970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24970"
    },
    {
      "name": "CVE-2024-52006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52006"
    },
    {
      "name": "CVE-2025-4373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4373"
    },
    {
      "name": "CVE-2024-13009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-13009"
    },
    {
      "name": "CVE-2025-50106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50106"
    },
    {
      "name": "CVE-2025-48385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48385"
    },
    {
      "name": "CVE-2025-48060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48060"
    },
    {
      "name": "CVE-2024-50154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50154"
    },
    {
      "name": "CVE-2025-27613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27613"
    },
    {
      "name": "CVE-2025-30754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30754"
    },
    {
      "name": "CVE-2024-10917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-10917"
    },
    {
      "name": "CVE-2022-49136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49136"
    },
    {
      "name": "CVE-2025-6965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6965"
    },
    {
      "name": "CVE-2022-49846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49846"
    },
    {
      "name": "CVE-2019-17543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17543"
    },
    {
      "name": "CVE-2025-38086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38086"
    },
    {
      "name": "CVE-2025-48384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48384"
    },
    {
      "name": "CVE-2025-7783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
    },
    {
      "name": "CVE-2025-27152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27152"
    },
    {
      "name": "CVE-2025-1471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1471"
    },
    {
      "name": "CVE-2025-38079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38079"
    },
    {
      "name": "CVE-2025-20012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
    },
    {
      "name": "CVE-2025-7425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7425"
    },
    {
      "name": "CVE-2025-37738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-37738"
    },
    {
      "name": "CVE-2024-53920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-53920"
    },
    {
      "name": "CVE-2025-48976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48976"
    },
    {
      "name": "CVE-2025-21587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21587"
    },
    {
      "name": "CVE-2025-52520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-52520"
    },
    {
      "name": "CVE-2024-52533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52533"
    },
    {
      "name": "CVE-2024-28956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
    },
    {
      "name": "CVE-2025-2697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2697"
    },
    {
      "name": "CVE-2025-47935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47935"
    },
    {
      "name": "CVE-2025-50059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50059"
    },
    {
      "name": "CVE-2025-21928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21928"
    },
    {
      "name": "CVE-2025-30761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30761"
    },
    {
      "name": "CVE-2024-47535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47535"
    },
    {
      "name": "CVE-2025-1494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1494"
    },
    {
      "name": "CVE-2025-1994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1994"
    },
    {
      "name": "CVE-2025-52434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-52434"
    },
    {
      "name": "CVE-2025-24495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
    },
    {
      "name": "CVE-2025-30698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30698"
    },
    {
      "name": "CVE-2022-49977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49977"
    },
    {
      "name": "CVE-2024-54661",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-54661"
    },
    {
      "name": "CVE-2025-37890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-37890"
    },
    {
      "name": "CVE-2025-22020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22020"
    },
    {
      "name": "CVE-2025-27533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27533"
    },
    {
      "name": "CVE-2025-6021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6021"
    },
    {
      "name": "CVE-2025-55668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55668"
    },
    {
      "name": "CVE-2025-25193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-25193"
    },
    {
      "name": "CVE-2024-58002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-58002"
    },
    {
      "name": "CVE-2025-32415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32415"
    },
    {
      "name": "CVE-2025-21905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21905"
    },
    {
      "name": "CVE-2024-23337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23337"
    },
    {
      "name": "CVE-2025-30749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30749"
    },
    {
      "name": "CVE-2025-38052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38052"
    },
    {
      "name": "CVE-2025-2900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2900"
    },
    {
      "name": "CVE-2025-53506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53506"
    },
    {
      "name": "CVE-2019-5427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-5427"
    },
    {
      "name": "CVE-2022-49788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49788"
    },
    {
      "name": "CVE-2025-20623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
    },
    {
      "name": "CVE-2025-48997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48997"
    },
    {
      "name": "CVE-2020-5260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-5260"
    },
    {
      "name": "CVE-2025-49796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49796"
    },
    {
      "name": "CVE-2025-21919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21919"
    },
    {
      "name": "CVE-2024-21131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21131"
    },
    {
      "name": "CVE-2024-34397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-34397"
    },
    {
      "name": "CVE-2025-21991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21991"
    },
    {
      "name": "CVE-2025-7338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7338"
    },
    {
      "name": "CVE-2025-24790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24790"
    },
    {
      "name": "CVE-2024-45332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
    },
    {
      "name": "CVE-2025-47273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
    },
    {
      "name": "CVE-2025-23150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-23150"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0746",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-08-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": "2025-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243411",
      "url": "https://www.ibm.com/support/pages/node/7243411"
    },
    {
      "published_at": "2025-08-22",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7242915",
      "url": "https://www.ibm.com/support/pages/node/7242915"
    },
    {
      "published_at": "2025-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243372",
      "url": "https://www.ibm.com/support/pages/node/7243372"
    },
    {
      "published_at": "2025-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7242159",
      "url": "https://www.ibm.com/support/pages/node/7242159"
    },
    {
      "published_at": "2025-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243146",
      "url": "https://www.ibm.com/support/pages/node/7243146"
    },
    {
      "published_at": "2025-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7242161",
      "url": "https://www.ibm.com/support/pages/node/7242161"
    },
    {
      "published_at": "2025-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243144",
      "url": "https://www.ibm.com/support/pages/node/7243144"
    },
    {
      "published_at": "2025-08-25",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243011",
      "url": "https://www.ibm.com/support/pages/node/7243011"
    },
    {
      "published_at": "2025-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243373",
      "url": "https://www.ibm.com/support/pages/node/7243373"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Intel RealSense SDK software versions ant\u00e9rieures \u00e0 2.56.2.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Advisor standalone component software software versions ant\u00e9rieures \u00e0 2024.2.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Server Board D50DNP et M50FCP UEFI versions ant\u00e9rieures \u00e0 R01.02.0003.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Ethernet Connections Boot Utility versions ant\u00e9rieures \u00e0 29.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "9th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "OpenVINO model server software maintained by Intel versions ant\u00e9rieures \u00e0 2024.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Level Zero software versions ant\u00e9rieures \u00e0 1.5.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "NVM Update Utility for Intel Ethernet Network Adapter E810 Series versions ant\u00e9rieures \u00e0 4.6.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Arc Pro graphics versions ant\u00e9rieures \u00e0 32.0.101.6303.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Graphics Driver software versions ant\u00e9rieures \u00e0 32.0.101.6083_101.5736.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Base Toolkit versions ant\u00e9rieures \u00e0 2024.2.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Atom, Pentium et Celeron processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Iris Xe Dedicated Graphics family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Edge Orchestrator software versions ant\u00e9rieures \u00e0 24.11 for Intel Tiber Edge Platform.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Endurance Gaming Mode software versions ant\u00e9rieures \u00e0 1.5.651.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel QAT software versions ant\u00e9rieures \u00e0 2.3.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Network Adapter Driver for Microsoft Windows 11 versions ant\u00e9rieures \u00e0 29.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "13th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "12th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "FPGA Support Package for the Intel oneAPI DPC++/C++ Compiler software for Windows versions ant\u00e9rieures \u00e0 2025.0.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "7th-10th Gen Intel Core processor family versions ant\u00e9rieures \u00e0 31.0.101.2134.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Atom, Pentium et Celeron processors versions ant\u00e9rieures \u00e0 31.0.101.2134.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Arc Graphics family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Data Center GPU Flex Series versions ant\u00e9rieures \u00e0 32.0.101.6314.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "10th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Graphics Windows DCH driver software versions ant\u00e9rieures \u00e0 30.0.100.9955.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel 7th-10th Gen Processor Graphics for Windows driver versions ant\u00e9rieures \u00e0 31.0.101.2130:",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Data Center GPU Flex Series for Windows driver versions ant\u00e9rieures \u00e0 31.0.101.4314:\n\nIntel Data Center GPU Flex 140\nIntel Data Center GPU Flex 170\n",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Administrative Tools for Intel Network Adapters versions ant\u00e9rieures \u00e0 29.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Arc et Iris Xe Graphics for Windows driver versions ant\u00e9rieures \u00e0 32.0.101.6083/32.0.101.5736:",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Graphics Drivers pour Intel Arc graphics versions ant\u00e9rieures \u00e0 32.0.101.6449/32.0.101.6256.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel 6th Gen Processor Graphics driver toutes versions.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Core Ultra processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "11th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "8th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Graphics Windows DCH driver software versions ant\u00e9rieures \u00e0 30.0.101.1191.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Ethernet Adapter Complete Driver Pack versions ant\u00e9rieures \u00e0 29.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "7th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Gaudi software installer versions ant\u00e9rieures \u00e0 before 1.18.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI DPC++/C++ Compiler software versions ant\u00e9rieures \u00e0 2025.0.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Arc\u2122 Pro A-series graphics versions ant\u00e9rieures \u00e0 30.0.101.1729.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Core Processor with Intel Hybrid Technology",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Simics Package Manager software versions ant\u00e9rieures \u00e0 1.12.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "14th Gen Intel Core processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Pentium et Celeron processor family",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Arc\u2122 A-Series graphics versions ant\u00e9rieures \u00e0 31.0.101.3277.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Iris Xe graphics versions ant\u00e9rieures \u00e0 32.0.101.6449/32.0.101.6256.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-20618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20618"
    },
    {
      "name": "CVE-2025-20008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20008"
    },
    {
      "name": "CVE-2024-31150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-31150"
    },
    {
      "name": "CVE-2025-20041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20041"
    },
    {
      "name": "CVE-2025-20043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20043"
    },
    {
      "name": "CVE-2025-21099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21099"
    },
    {
      "name": "CVE-2025-22892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22892"
    },
    {
      "name": "CVE-2025-20084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20084"
    },
    {
      "name": "CVE-2025-20022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20022"
    },
    {
      "name": "CVE-2025-23233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-23233"
    },
    {
      "name": "CVE-2025-20095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20095"
    },
    {
      "name": "CVE-2025-20101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20101"
    },
    {
      "name": "CVE-2024-45067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45067"
    },
    {
      "name": "CVE-2024-43420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
    },
    {
      "name": "CVE-2025-22848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22848"
    },
    {
      "name": "CVE-2025-20039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20039"
    },
    {
      "name": "CVE-2025-20006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20006"
    },
    {
      "name": "CVE-2025-22843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22843"
    },
    {
      "name": "CVE-2025-21094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21094"
    },
    {
      "name": "CVE-2025-20616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20616"
    },
    {
      "name": "CVE-2025-22446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22446"
    },
    {
      "name": "CVE-2024-48869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-48869"
    },
    {
      "name": "CVE-2024-28954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28954"
    },
    {
      "name": "CVE-2024-39833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39833"
    },
    {
      "name": "CVE-2025-20003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20003"
    },
    {
      "name": "CVE-2025-20629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20629"
    },
    {
      "name": "CVE-2024-21829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21829"
    },
    {
      "name": "CVE-2025-20018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20018"
    },
    {
      "name": "CVE-2025-22895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22895"
    },
    {
      "name": "CVE-2024-43101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43101"
    },
    {
      "name": "CVE-2025-20013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20013"
    },
    {
      "name": "CVE-2025-22844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22844"
    },
    {
      "name": "CVE-2025-20057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20057"
    },
    {
      "name": "CVE-2025-21100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21100"
    },
    {
      "name": "CVE-2024-47550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47550"
    },
    {
      "name": "CVE-2024-39758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39758"
    },
    {
      "name": "CVE-2024-21859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21859"
    },
    {
      "name": "CVE-2025-20612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20612"
    },
    {
      "name": "CVE-2025-20046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20046"
    },
    {
      "name": "CVE-2024-47800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47800"
    },
    {
      "name": "CVE-2025-24308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24308"
    },
    {
      "name": "CVE-2025-20611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20611"
    },
    {
      "name": "CVE-2024-28047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28047"
    },
    {
      "name": "CVE-2025-20082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20082"
    },
    {
      "name": "CVE-2025-20054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20054"
    },
    {
      "name": "CVE-2025-20034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20034"
    },
    {
      "name": "CVE-2025-20047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20047"
    },
    {
      "name": "CVE-2024-31073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-31073"
    },
    {
      "name": "CVE-2025-20079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20079"
    },
    {
      "name": "CVE-2025-20052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20052"
    },
    {
      "name": "CVE-2024-29222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29222"
    },
    {
      "name": "CVE-2025-21081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21081"
    },
    {
      "name": "CVE-2025-22448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22448"
    },
    {
      "name": "CVE-2025-20015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20015"
    },
    {
      "name": "CVE-2025-20083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20083"
    },
    {
      "name": "CVE-2025-20026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20026"
    },
    {
      "name": "CVE-2025-20624",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20624"
    },
    {
      "name": "CVE-2025-20103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20103"
    },
    {
      "name": "CVE-2024-46895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46895"
    },
    {
      "name": "CVE-2024-36292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36292"
    },
    {
      "name": "CVE-2025-20071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20071"
    },
    {
      "name": "CVE-2025-20031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20031"
    },
    {
      "name": "CVE-2025-20100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20100"
    },
    {
      "name": "CVE-2025-20104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20104"
    },
    {
      "name": "CVE-2024-31157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-31157"
    },
    {
      "name": "CVE-2025-20108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20108"
    },
    {
      "name": "CVE-2025-20623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
    },
    {
      "name": "CVE-2025-20076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20076"
    },
    {
      "name": "CVE-2024-28036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28036"
    },
    {
      "name": "CVE-2024-45333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45333"
    },
    {
      "name": "CVE-2024-47795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47795"
    },
    {
      "name": "CVE-2025-20032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20032"
    },
    {
      "name": "CVE-2025-20004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20004"
    },
    {
      "name": "CVE-2025-20009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20009"
    },
    {
      "name": "CVE-2024-31155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-31155"
    },
    {
      "name": "CVE-2025-20062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20062"
    },
    {
      "name": "CVE-2024-45332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
    },
    {
      "name": "CVE-2024-45371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45371"
    },
    {
      "name": "CVE-2025-20030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20030"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0402",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-05-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Intel. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Intel",
  "vendor_advisories": [
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01268",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01268.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01216",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01216.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01271",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01271.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01290",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01290.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01252",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01252.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01274",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01274.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01293",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01293.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01305",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01305.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01263",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01263.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01244",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01254",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01254.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01270",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01272",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01272.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01297",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01297.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01259",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01278",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01278.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01239",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01273",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01273.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01180",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01180.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01295",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01295.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01253",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01243",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01243.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01269",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01269.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01247",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-01294",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01294.html"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Sterling External Authentication Server versions 6.1.0.x ant\u00e9rieures \u00e0 6.1.0.3 GA",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Secure Proxy versions 6.1.0.x ant\u00e9rieures \u00e0 6.1.0.2 GA",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Secure Proxy versions 6.2.0.x ant\u00e9rieures \u00e0 6.2.0.2 GA",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct pour Microsoft Windows versions 6.3.x ant\u00e9rieures \u00e0 6.3.0.6",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct pour Microsoft Windows versions 6.4.x ant\u00e9rieures \u00e0 6.4.0.3",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 Bridge versions ant\u00e9rieures \u00e0 1.1.1",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Cognos Command Center versions 10.2.4.1 et 10.2.5 ant\u00e9rieures \u00e0 10.2.5 FP1 IF1",
      "product": {
        "name": "Cognos Dashboards",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar SIEM versions 7.5.0 ant\u00e9rieures \u00e0 QRadar 7.5.0 UP13 IF01",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar Incident Forensics versions 7.5.0 ant\u00e9rieures \u00e0 QIF 7.5.0 UP13 IF01",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "WebSphere Remote Server versions 9.1, 8.0 et 8.5 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Cognos Dashboards on Cloud Pak for Data versions 5.x ant\u00e9rieures \u00e0 5.2.1",
      "product": {
        "name": "Cognos Dashboards",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-6531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6531"
    },
    {
      "name": "CVE-2025-4447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4447"
    },
    {
      "name": "CVE-2024-21144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21144"
    },
    {
      "name": "CVE-2025-24789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24789"
    },
    {
      "name": "CVE-2022-50020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-50020"
    },
    {
      "name": "CVE-2025-47944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47944"
    },
    {
      "name": "CVE-2024-50349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50349"
    },
    {
      "name": "CVE-2025-46835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-46835"
    },
    {
      "name": "CVE-2024-57980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-57980"
    },
    {
      "name": "CVE-2024-43420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
    },
    {
      "name": "CVE-2025-49794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49794"
    },
    {
      "name": "CVE-2025-22004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22004"
    },
    {
      "name": "CVE-2025-27614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27614"
    },
    {
      "name": "CVE-2022-49111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49111"
    },
    {
      "name": "CVE-2025-1470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1470"
    },
    {
      "name": "CVE-2022-49058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49058"
    },
    {
      "name": "CVE-2025-24970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24970"
    },
    {
      "name": "CVE-2024-52006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52006"
    },
    {
      "name": "CVE-2025-4373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-4373"
    },
    {
      "name": "CVE-2024-13009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-13009"
    },
    {
      "name": "CVE-2025-50106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50106"
    },
    {
      "name": "CVE-2025-48385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48385"
    },
    {
      "name": "CVE-2025-48060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48060"
    },
    {
      "name": "CVE-2024-50154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50154"
    },
    {
      "name": "CVE-2025-27613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27613"
    },
    {
      "name": "CVE-2025-30754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30754"
    },
    {
      "name": "CVE-2024-10917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-10917"
    },
    {
      "name": "CVE-2022-49136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49136"
    },
    {
      "name": "CVE-2025-6965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6965"
    },
    {
      "name": "CVE-2022-49846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49846"
    },
    {
      "name": "CVE-2019-17543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17543"
    },
    {
      "name": "CVE-2025-38086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38086"
    },
    {
      "name": "CVE-2025-48384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48384"
    },
    {
      "name": "CVE-2025-7783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
    },
    {
      "name": "CVE-2025-27152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27152"
    },
    {
      "name": "CVE-2025-1471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1471"
    },
    {
      "name": "CVE-2025-38079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38079"
    },
    {
      "name": "CVE-2025-20012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
    },
    {
      "name": "CVE-2025-7425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7425"
    },
    {
      "name": "CVE-2025-37738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-37738"
    },
    {
      "name": "CVE-2024-53920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-53920"
    },
    {
      "name": "CVE-2025-48976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48976"
    },
    {
      "name": "CVE-2025-21587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21587"
    },
    {
      "name": "CVE-2025-52520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-52520"
    },
    {
      "name": "CVE-2024-52533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52533"
    },
    {
      "name": "CVE-2024-28956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
    },
    {
      "name": "CVE-2025-2697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2697"
    },
    {
      "name": "CVE-2025-47935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47935"
    },
    {
      "name": "CVE-2025-50059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50059"
    },
    {
      "name": "CVE-2025-21928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21928"
    },
    {
      "name": "CVE-2025-30761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30761"
    },
    {
      "name": "CVE-2024-47535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47535"
    },
    {
      "name": "CVE-2025-1494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1494"
    },
    {
      "name": "CVE-2025-1994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-1994"
    },
    {
      "name": "CVE-2025-52434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-52434"
    },
    {
      "name": "CVE-2025-24495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
    },
    {
      "name": "CVE-2025-30698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30698"
    },
    {
      "name": "CVE-2022-49977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49977"
    },
    {
      "name": "CVE-2024-54661",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-54661"
    },
    {
      "name": "CVE-2025-37890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-37890"
    },
    {
      "name": "CVE-2025-22020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22020"
    },
    {
      "name": "CVE-2025-27533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27533"
    },
    {
      "name": "CVE-2025-6021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6021"
    },
    {
      "name": "CVE-2025-55668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55668"
    },
    {
      "name": "CVE-2025-25193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-25193"
    },
    {
      "name": "CVE-2024-58002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-58002"
    },
    {
      "name": "CVE-2025-32415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32415"
    },
    {
      "name": "CVE-2025-21905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21905"
    },
    {
      "name": "CVE-2024-23337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23337"
    },
    {
      "name": "CVE-2025-30749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30749"
    },
    {
      "name": "CVE-2025-38052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38052"
    },
    {
      "name": "CVE-2025-2900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2900"
    },
    {
      "name": "CVE-2025-53506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53506"
    },
    {
      "name": "CVE-2019-5427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-5427"
    },
    {
      "name": "CVE-2022-49788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49788"
    },
    {
      "name": "CVE-2025-20623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
    },
    {
      "name": "CVE-2025-48997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48997"
    },
    {
      "name": "CVE-2020-5260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-5260"
    },
    {
      "name": "CVE-2025-49796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49796"
    },
    {
      "name": "CVE-2025-21919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21919"
    },
    {
      "name": "CVE-2024-21131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21131"
    },
    {
      "name": "CVE-2024-34397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-34397"
    },
    {
      "name": "CVE-2025-21991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21991"
    },
    {
      "name": "CVE-2025-7338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7338"
    },
    {
      "name": "CVE-2025-24790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24790"
    },
    {
      "name": "CVE-2024-45332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
    },
    {
      "name": "CVE-2025-47273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
    },
    {
      "name": "CVE-2025-23150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-23150"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0746",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-08-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": "2025-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243411",
      "url": "https://www.ibm.com/support/pages/node/7243411"
    },
    {
      "published_at": "2025-08-22",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7242915",
      "url": "https://www.ibm.com/support/pages/node/7242915"
    },
    {
      "published_at": "2025-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243372",
      "url": "https://www.ibm.com/support/pages/node/7243372"
    },
    {
      "published_at": "2025-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7242159",
      "url": "https://www.ibm.com/support/pages/node/7242159"
    },
    {
      "published_at": "2025-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243146",
      "url": "https://www.ibm.com/support/pages/node/7243146"
    },
    {
      "published_at": "2025-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7242161",
      "url": "https://www.ibm.com/support/pages/node/7242161"
    },
    {
      "published_at": "2025-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243144",
      "url": "https://www.ibm.com/support/pages/node/7243144"
    },
    {
      "published_at": "2025-08-25",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243011",
      "url": "https://www.ibm.com/support/pages/node/7243011"
    },
    {
      "published_at": "2025-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7243373",
      "url": "https://www.ibm.com/support/pages/node/7243373"
    }
  ]
}

{
  "CVSS 2.0": "AV:L/AC:H/Au:S/C:C/I:N/A:N",
  "CVSS 3.0": "AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Intel Corp., \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\"",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "1.7 (Astra Linux Special Edition), 1.8 (Astra Linux Special Edition), \u0434\u043e 3.20250512.1 (Intel Microcode), \u0434\u043e 2.14 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Intel Microcode:\nhttps://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250512\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 intel-microcode \u0434\u043e 3.20250512.1~deb12u1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 intel-microcode \u0434\u043e 3.20250512.1~deb10u1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f intel-microcode \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.20250812.1",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "12.05.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "24.10.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.09.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-11966",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-20623",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Intel Microcode, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.8  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\" \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.14  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel Microcode, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CWE-200)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel Microcode \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250512\nhttps://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-20623\nhttps://security-tracker.debian.org/tracker/CVE-2025-20623\nhttps://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.14/",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-200",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 3,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,6)"
}

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access."
    },
    {
      "lang": "es",
      "value": "La exposici\u00f3n de informaci\u00f3n confidencial causada por un estado predictor de microarquitectura compartido que influye en la ejecuci\u00f3n transitoria de algunos procesadores Intel(R) Core\u2122 (d\u00e9cima generaci\u00f3n) puede permitir que un usuario autenticado habilite potencialmente la divulgaci\u00f3n de informaci\u00f3n a trav\u00e9s del acceso local."
    }
  ],
  "id": "CVE-2025-20623",
  "lastModified": "2026-04-15T00:35:42.020",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.6,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.1,
        "impactScore": 4.0,
        "source": "secure@intel.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "HIGH",
          "attackRequirements": "PRESENT",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 5.7,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "secure@intel.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-05-13T21:16:08.240",
  "references": [
    {
      "source": "secure@intel.com",
      "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Deferred"
}

{
  "affected": [],
  "aliases": [
    "CVE-2025-20623"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-13T21:16:08Z",
    "severity": "MODERATE"
  },
  "details": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
  "id": "GHSA-fv2p-m3fq-rq6h",
  "modified": "2025-11-03T21:33:54Z",
  "published": "2025-05-13T21:30:56Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
    },
    {
      "type": "WEB",
      "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "ucode-intel-20250512-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the ucode-intel-20250512-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15093",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15093-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2025:15093-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IDMNMRHOEJBKOC4ZPMYVNMKT2SGRVB7Q/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2025:15093-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IDMNMRHOEJBKOC4ZPMYVNMKT2SGRVB7Q/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-28956 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-28956/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-43420 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-43420/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-45332 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-45332/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-20012 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-20012/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-20054 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-20054/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-20103 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-20103/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-20623 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-20623/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-24495 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-24495/"
      }
    ],
    "title": "ucode-intel-20250512-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-05-15T00:00:00Z",
      "generator": {
        "date": "2025-05-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15093-1",
      "initial_release_date": "2025-05-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-05-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20250512-1.1.aarch64",
                "product": {
                  "name": "ucode-intel-20250512-1.1.aarch64",
                  "product_id": "ucode-intel-20250512-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20250512-1.1.ppc64le",
                "product": {
                  "name": "ucode-intel-20250512-1.1.ppc64le",
                  "product_id": "ucode-intel-20250512-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20250512-1.1.s390x",
                "product": {
                  "name": "ucode-intel-20250512-1.1.s390x",
                  "product_id": "ucode-intel-20250512-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ucode-intel-20250512-1.1.x86_64",
                "product": {
                  "name": "ucode-intel-20250512-1.1.x86_64",
                  "product_id": "ucode-intel-20250512-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20250512-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64"
        },
        "product_reference": "ucode-intel-20250512-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20250512-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le"
        },
        "product_reference": "ucode-intel-20250512-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20250512-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x"
        },
        "product_reference": "ucode-intel-20250512-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ucode-intel-20250512-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        },
        "product_reference": "ucode-intel-20250512-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-28956"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-28956",
          "url": "https://www.suse.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2024-28956",
          "url": "https://bugzilla.suse.com/1242006"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-28956"
    },
    {
      "cve": "CVE-2024-43420",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-43420"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-43420",
          "url": "https://www.suse.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2024-43420",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243451 for CVE-2024-43420",
          "url": "https://bugzilla.suse.com/1243451"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-43420"
    },
    {
      "cve": "CVE-2024-45332",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-45332"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-45332",
          "url": "https://www.suse.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2024-45332",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243180 for CVE-2024-45332",
          "url": "https://bugzilla.suse.com/1243180"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-45332"
    },
    {
      "cve": "CVE-2025-20012",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-20012"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect behavior order for some Intel(R) Core(tm) Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-20012",
          "url": "https://www.suse.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2025-20012",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243123 for CVE-2025-20012",
          "url": "https://bugzilla.suse.com/1243123"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-20012"
    },
    {
      "cve": "CVE-2025-20054",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-20054"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-20054",
          "url": "https://www.suse.com/security/cve/CVE-2025-20054"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2025-20054",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243123 for CVE-2025-20054",
          "url": "https://bugzilla.suse.com/1243123"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-20054"
    },
    {
      "cve": "CVE-2025-20103",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-20103"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-20103",
          "url": "https://www.suse.com/security/cve/CVE-2025-20103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2025-20103",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243123 for CVE-2025-20103",
          "url": "https://bugzilla.suse.com/1243123"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-20103"
    },
    {
      "cve": "CVE-2025-20623",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-20623"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core(tm) processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-20623",
          "url": "https://www.suse.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2025-20623",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243454 for CVE-2025-20623",
          "url": "https://bugzilla.suse.com/1243454"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-20623"
    },
    {
      "cve": "CVE-2025-24495",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-24495"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core(tm) Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
          "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-24495",
          "url": "https://www.suse.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2025-24495",
          "url": "https://bugzilla.suse.com/1242006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243123 for CVE-2025-24495",
          "url": "https://bugzilla.suse.com/1243123"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.aarch64",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.ppc64le",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.s390x",
            "openSUSE Tumbleweed:ucode-intel-20250512-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-05-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-24495"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nBug Fix(es) and Enhancement(s):\n\n* Update microcode_ctl to latest upstream [rhel-9.6.z] (JIRA:RHEL-96929)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91226)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91233)\n\n* microcode_ctl: From CVEorg collector [rhel-9.6.z] (JIRA:RHEL-91241)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2025:9433",
        "url": "https://access.redhat.com/errata/RHBA-2025:9433"
      },
      {
        "category": "external",
        "summary": "RHEL-96929",
        "url": "https://issues.redhat.com/browse/RHEL-96929"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_9433.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: microcode_ctl bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2025-11-21T17:23:54+00:00",
      "generator": {
        "date": "2025-11-21T17:23:54+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHBA-2025:9433",
      "initial_release_date": "2025-06-24T02:16:25+00:00",
      "revision_history": [
        {
          "date": "2025-06-24T02:16:25+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-06-24T02:16:25+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:23:54+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                  "product_id": "BaseOS-9.6.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
                "product": {
                  "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
                  "product_id": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20250211-1.20250512.1.el9_6?arch=src\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
                "product": {
                  "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
                  "product_id": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20250211-1.20250512.1.el9_6?arch=noarch\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch"
        },
        "product_reference": "microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        },
        "product_reference": "microcode_ctl-4:20250211-1.20250512.1.el9_6.src",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
          "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-24T02:16:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:9433"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.noarch",
            "BaseOS-9.6.0.Z.MAIN.EUS:microcode_ctl-4:20250211-1.20250512.1.el9_6.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for microcode_ctl is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nSecurity Fix(es):\n\n* microcode_ctl: From CVEorg collector (CVE-2025-24495)\n\n* microcode_ctl: From CVEorg collector (CVE-2025-20012)\n\n* microcode_ctl: From CVEorg collector (CVE-2024-28956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:10101",
        "url": "https://access.redhat.com/errata/RHSA-2025:10101"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2366089",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
      },
      {
        "category": "external",
        "summary": "2366114",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
      },
      {
        "category": "external",
        "summary": "2366125",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10101.json"
      }
    ],
    "title": "Red Hat Security Advisory: microcode_ctl security update",
    "tracking": {
      "current_release_date": "2026-03-18T03:02:43+00:00",
      "generator": {
        "date": "2026-03-18T03:02:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2025:10101",
      "initial_release_date": "2025-07-01T15:24:53+00:00",
      "revision_history": [
        {
          "date": "2025-07-01T15:24:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-01T15:24:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T03:02:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
                  "product_id": "BaseOS-9.4.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:9.4::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
                "product": {
                  "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
                  "product_id": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20230808-2.20250512.1.el9_4?arch=src\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
                "product": {
                  "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
                  "product_id": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/microcode_ctl@20230808-2.20250512.1.el9_4?arch=noarch\u0026epoch=4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch"
        },
        "product_reference": "microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        },
        "product_reference": "microcode_ctl-4:20230808-2.20250512.1.el9_4.src",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "cwe": {
        "id": "CWE-1421",
        "name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:30.376335+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHI_NO, by leveraging in-kernel gadgets (potentially accessible via SECCOMP/cBPF), Branch Target Buffer (BTB) aliasing, and direct-to-indirect branch predictor training. While the root cause lies in CPU architectural behavior, the vulnerability manifests through kernel-level speculation paths, allowing attackers to potentially leak sensitive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The \"Training Solo\" attack classes introduce new self-training methods to exploit Spectre-v2 from within domain isolation implementations. They can be reasonably classified as Moderate severity due to several practical and architectural limitations.\n\nFirst, these attacks rely heavily on the presence of specific in-kernel or in-hypervisor gadgets, such as history-crafting or disclosure gadgets, which are not universally available and vary across kernel versions and configurations.\n\nSecond, the attacks generally require local code execution within the victim domain, meaning they do not expand the threat model beyond existing Spectre-v2 scenarios where attackers already have some degree of execution capability.\n\nThird, the leak rates, while measurable, remain relatively low (1.7\u201317 KB/s) and demand sustained access and stability to extract meaningful information. So their limited practical exploitability makes them a moderate, not critical, threat in real-world settings.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:56.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2024-43420",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:09.641634+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366159"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366159",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366159"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-43420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43420"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:09.384000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2024-45332",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:05:16.220402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Intel has recommended through its official advisory that users of the affected processors search their hardware vendor for firmware updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45332"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/05/13/7",
          "url": "http://www.openwall.com/lists/oss-security/2025/05/13/7"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:03:12.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-20012",
      "cwe": {
        "id": "CWE-696",
        "name": "Incorrect Behavior Order"
      },
      "discovery_date": "2025-05-13T22:02:43.991918+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20012"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        }
      ],
      "release_date": "2025-05-13T21:01:33.504000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    },
    {
      "cve": "CVE-2025-20623",
      "cwe": {
        "id": "CWE-1423",
        "name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"
      },
      "discovery_date": "2025-05-13T22:03:55.575358+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366133"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core\u2122 processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: Exposure of sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366133",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366133"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-20623",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20623"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html"
        }
      ],
      "release_date": "2025-05-13T21:02:26.040000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: Exposure of sensitive information"
    },
    {
      "cve": "CVE-2025-24495",
      "cwe": {
        "id": "CWE-1419",
        "name": "Incorrect Initialization of Resource"
      },
      "discovery_date": "2025-05-13T22:01:12.147444+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Branch Prediction Unit (BPU) of Intel\u0027s Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier (IBPB) protections. By employing branch predictor training techniques as described in the \"Training Solo\" publication, an attacker with local privileges could use this bypass to exfiltrate sensitive data from an affected system, including from host hypervisors or neighboring guests in virtualized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "microcode_ctl: From CVEorg collector",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was disclosed as part of the \"Training Solo\" report. Training Solo is a technique similar to Spectre-v2 which bypasses extant protections like IBPB or IBRS. While the technique primarily bypasses those protections by performing branch predictor training in a privileged domain, CVE-2025-24495 specifically relates to a hardware flaw in Intel\u0027s Lion Core CPUs. Intel has released a microcode update to address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
          "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24495"
        },
        {
          "category": "external",
          "summary": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html"
        },
        {
          "category": "external",
          "summary": "https://www.vusec.net/projects/training-solo/",
          "url": "https://www.vusec.net/projects/training-solo/"
        }
      ],
      "release_date": "2025-05-13T21:02:51.390000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-01T15:24:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:10101"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. As this is a bypass of previous mitigations for existing hardware flaws, we do not expect that mitigations specifically for this issue will be available.",
          "product_ids": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.noarch",
            "BaseOS-9.4.0.Z.EUS:microcode_ctl-4:20230808-2.20250512.1.el9_4.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "microcode_ctl: From CVEorg collector"
    }
  ]
}