suse-su-2025:03053-1
Vulnerability from csaf_suse
Published
2025-09-02 17:42
Modified
2025-09-02 17:42
Summary
Security update for ucode-intel
Notes
Title of the patch
Security update for ucode-intel
Description of the patch
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20250812 release (bsc#1248438)
- CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-22840: Sequence of processor instructions leads to unexpected behavior for some Intel Xeon 6 Scalable processors may allow an authenticated user to potentially enable escalation of privilege via local access
- CVE-2025-22839: Insufficient granularity of access control in the OOB-MSM for some Intel Xeon 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.
- CVE-2025-22889: Improper handling of overlap between protected memory ranges for some Intel Xeon 6 processor with Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2025-20053: Improper buffer restrictions for some Intel Xeon Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2025-26403: Out-of-bounds write in the memory subsystem for some Intel Xeon 6 processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2025-32086: Improperly implemented security check for standard in the DDRIO configuration for some Intel Xeon 6 Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.
- Update for functional issues.
- Updated Platforms:
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| ARL-H | A1 | 06-c5-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2)
| ARL-S/HX (8P) | B0 | 06-c6-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2)
| EMR-SP | A1 | 06-cf-02/87 | 210002a9 | 210002b3 | Xeon Scalable Gen5
| GNR-AP/SP | B0 | 06-ad-01/95 | 010003a2 | 010003d0 | Xeon Scalable Gen6
| GNR-AP/SP | H0 | 06-ad-01/20 | 0a0000d1 | 0a000100 | Xeon Scalable Gen6
| ICL-D | B0 | 06-6c-01/10 | 010002d0 | 010002e0 | Xeon D-17xx, D-27xx
| ICX-SP | Dx/M1 | 06-6a-06/87 | 0d000404 | 0d000410 | Xeon Scalable Gen3
| LNL | B0 | 06-bd-01/80 | 0000011f | 00000123 | Core Ultra 200 V Series Processor
| MTL | C0 | 06-aa-04/e6 | 00000024 | 00000025 | Core™ Ultra Processor
| RPL-H/P/PX 6+8 | J0 | 06-ba-02/e0 | 00004128 | 00004129 | Core Gen13
| RPL-U 2+8 | Q0 | 06-ba-03/e0 | 00004128 | 00004129 | Core Gen13
| SPR-HBM | Bx | 06-8f-08/10 | 2c0003f7 | 2c000401 | Xeon Max
| SPR-SP | E4/S2 | 06-8f-07/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4
| SPR-SP | E5/S3 | 06-8f-08/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4
| SRF-SP | C0 | 06-af-03/01 | 03000341 | 03000362 | Xeon 6700-Series Processors with E-Cores
New Disclosures Updated in Prior Releases:
All ADL, RPL, SPR, EMR, MTL, ARL Microcode patches previously released in May 2025.
Patchnames
SUSE-2025-3053,SUSE-SLE-Micro-5.3-2025-3053,SUSE-SLE-Micro-5.4-2025-3053,SUSE-SLE-Micro-5.5-2025-3053,SUSE-SLE-Module-Basesystem-15-SP6-2025-3053,SUSE-SLE-Module-Basesystem-15-SP7-2025-3053,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-3053,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-3053,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-3053,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-3053,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-3053,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-3053,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-3053,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-3053,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-3053,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-3053,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-3053,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-LTS-2025-3053,SUSE-SLE-Product-SUSE-Manager-Server-4.3-LTS-2025-3053,SUSE-SUSE-MicroOS-5.1-2025-3053,SUSE-SUSE-MicroOS-5.2-2025-3053,SUSE-Storage-7.1-2025-3053,openSUSE-SLE-15.6-2025-3053
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for ucode-intel", "title": "Title of the patch" }, { "category": "description", "text": "This update for ucode-intel fixes the following issues:\n\n- Intel CPU Microcode was updated to the 20250812 release (bsc#1248438)\n - CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable escalation of privilege via local access.\n - CVE-2025-22840: Sequence of processor instructions leads to unexpected behavior for some Intel Xeon 6 Scalable processors may allow an authenticated user to potentially enable escalation of privilege via local access\n - CVE-2025-22839: Insufficient granularity of access control in the OOB-MSM for some Intel Xeon 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.\n - CVE-2025-22889: Improper handling of overlap between protected memory ranges for some Intel Xeon 6 processor with Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.\n - CVE-2025-20053: Improper buffer restrictions for some Intel Xeon Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access.\n - CVE-2025-26403: Out-of-bounds write in the memory subsystem for some Intel Xeon 6 processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.\n - CVE-2025-32086: Improperly implemented security check for standard in the DDRIO configuration for some Intel Xeon 6 Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.\n - Update for functional issues.\n - Updated Platforms:\n\n | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products\n |:---------------|:---------|:------------|:---------|:---------|:---------\n | ARL-H | A1 | 06-c5-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2)\n | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2)\n | EMR-SP | A1 | 06-cf-02/87 | 210002a9 | 210002b3 | Xeon Scalable Gen5\n | GNR-AP/SP | B0 | 06-ad-01/95 | 010003a2 | 010003d0 | Xeon Scalable Gen6\n | GNR-AP/SP | H0 | 06-ad-01/20 | 0a0000d1 | 0a000100 | Xeon Scalable Gen6\n | ICL-D | B0 | 06-6c-01/10 | 010002d0 | 010002e0 | Xeon D-17xx, D-27xx\n | ICX-SP | Dx/M1 | 06-6a-06/87 | 0d000404 | 0d000410 | Xeon Scalable Gen3\n | LNL | B0 | 06-bd-01/80 | 0000011f | 00000123 | Core Ultra 200 V Series Processor\n | MTL | C0 | 06-aa-04/e6 | 00000024 | 00000025 | Core\u2122 Ultra Processor\n | RPL-H/P/PX 6+8 | J0 | 06-ba-02/e0 | 00004128 | 00004129 | Core Gen13\n | RPL-U 2+8 | Q0 | 06-ba-03/e0 | 00004128 | 00004129 | Core Gen13\n | SPR-HBM | Bx | 06-8f-08/10 | 2c0003f7 | 2c000401 | Xeon Max\n | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4\n | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4\n | SRF-SP | C0 | 06-af-03/01 | 03000341 | 03000362 | Xeon 6700-Series Processors with E-Cores\n \n New Disclosures Updated in Prior Releases:\n All ADL, RPL, SPR, EMR, MTL, ARL Microcode patches previously released in May 2025.\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2025-3053,SUSE-SLE-Micro-5.3-2025-3053,SUSE-SLE-Micro-5.4-2025-3053,SUSE-SLE-Micro-5.5-2025-3053,SUSE-SLE-Module-Basesystem-15-SP6-2025-3053,SUSE-SLE-Module-Basesystem-15-SP7-2025-3053,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-3053,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-3053,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-3053,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-3053,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-3053,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-3053,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-3053,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-3053,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-3053,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-3053,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-3053,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-LTS-2025-3053,SUSE-SLE-Product-SUSE-Manager-Server-4.3-LTS-2025-3053,SUSE-SUSE-MicroOS-5.1-2025-3053,SUSE-SUSE-MicroOS-5.2-2025-3053,SUSE-Storage-7.1-2025-3053,openSUSE-SLE-15.6-2025-3053", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_03053-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2025:03053-1", "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202503053-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2025:03053-1", "url": "https://lists.suse.com/pipermail/sle-updates/2025-September/041494.html" }, { "category": "self", "summary": "SUSE Bug 1248438", "url": "https://bugzilla.suse.com/1248438" }, { "category": "self", "summary": "SUSE CVE CVE-2025-20053 page", "url": "https://www.suse.com/security/cve/CVE-2025-20053/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-20109 page", "url": "https://www.suse.com/security/cve/CVE-2025-20109/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-22839 page", "url": "https://www.suse.com/security/cve/CVE-2025-22839/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-22840 page", "url": "https://www.suse.com/security/cve/CVE-2025-22840/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-22889 page", "url": "https://www.suse.com/security/cve/CVE-2025-22889/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-26403 page", "url": "https://www.suse.com/security/cve/CVE-2025-26403/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-32086 page", "url": "https://www.suse.com/security/cve/CVE-2025-32086/" } ], "title": "Security update for ucode-intel", "tracking": { "current_release_date": "2025-09-02T17:42:12Z", "generator": { "date": "2025-09-02T17:42:12Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2025:03053-1", "initial_release_date": "2025-09-02T17:42:12Z", "revision_history": [ { "date": "2025-09-02T17:42:12Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "ucode-intel-20250812-150200.59.1.i586", "product": { "name": "ucode-intel-20250812-150200.59.1.i586", "product_id": "ucode-intel-20250812-150200.59.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "ucode-intel-20250812-150200.59.1.x86_64", "product": { "name": "ucode-intel-20250812-150200.59.1.x86_64", "product_id": "ucode-intel-20250812-150200.59.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.3", "product": { "name": "SUSE Linux Enterprise Micro 5.3", "product_id": "SUSE Linux Enterprise Micro 5.3", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-micro:5.3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.4", "product": { "name": "SUSE Linux Enterprise Micro 5.4", "product_id": "SUSE Linux Enterprise Micro 5.4", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-micro:5.4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.5", "product": { "name": "SUSE Linux Enterprise Micro 5.5", "product_id": "SUSE Linux Enterprise Micro 5.5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-micro:5.5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Basesystem 15 SP6", "product": { "name": "SUSE Linux Enterprise Module for Basesystem 15 SP6", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp6" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Basesystem 15 SP7", "product": { "name": "SUSE Linux Enterprise Module for Basesystem 15 SP7", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp7" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP5-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP5-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp5" } } }, { "category": "product_name", "name": "SUSE Manager Proxy LTS 4.3", "product": { "name": "SUSE Manager Proxy LTS 4.3", "product_id": "SUSE Manager Proxy LTS 4.3", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-manager-proxy-lts:4.3" } } }, { "category": "product_name", "name": "SUSE Manager Server LTS 4.3", "product": { "name": "SUSE Manager Server LTS 4.3", "product_id": "SUSE Manager Server LTS 4.3", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-manager-server-lts:4.3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.1", "product": { "name": "SUSE Linux Enterprise Micro 5.1", "product_id": "SUSE Linux Enterprise Micro 5.1", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-microos:5.1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.2", "product": { "name": "SUSE Linux Enterprise Micro 5.2", "product_id": "SUSE Linux Enterprise Micro 5.2", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-microos:5.2" } } }, { "category": "product_name", "name": "SUSE Enterprise Storage 7.1", "product": { "name": "SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1", "product_identification_helper": { "cpe": "cpe:/o:suse:ses:7.1" } } }, { "category": "product_name", "name": "openSUSE Leap 15.6", "product": { "name": "openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.6" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3", "product_id": "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4", "product_id": "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5", "product_id": "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Manager Proxy LTS 4.3", "product_id": "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Manager Proxy LTS 4.3" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Manager Server LTS 4.3", "product_id": "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Manager Server LTS 4.3" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1", "product_id": "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2", "product_id": "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-20250812-150200.59.1.x86_64 as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" }, "product_reference": "ucode-intel-20250812-150200.59.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.6" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-20053", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-20053" } ], "notes": [ { "category": "general", "text": "Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-20053", "url": "https://www.suse.com/security/cve/CVE-2025-20053" }, { "category": "external", "summary": "SUSE Bug 1248438 for CVE-2025-20053", "url": "https://bugzilla.suse.com/1248438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-09-02T17:42:12Z", "details": "important" } ], "title": "CVE-2025-20053" }, { "cve": "CVE-2025-20109", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-20109" } ], "notes": [ { "category": "general", "text": "Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-20109", "url": "https://www.suse.com/security/cve/CVE-2025-20109" }, { "category": "external", "summary": "SUSE Bug 1248438 for CVE-2025-20109", "url": "https://bugzilla.suse.com/1248438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-09-02T17:42:12Z", "details": "important" } ], "title": "CVE-2025-20109" }, { "cve": "CVE-2025-22839", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-22839" } ], "notes": [ { "category": "general", "text": "Insufficient granularity of access control in the OOB-MSM for some Intel(R) Xeon(R) 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-22839", "url": "https://www.suse.com/security/cve/CVE-2025-22839" }, { "category": "external", "summary": "SUSE Bug 1248438 for CVE-2025-22839", "url": "https://bugzilla.suse.com/1248438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-09-02T17:42:12Z", "details": "important" } ], "title": "CVE-2025-22839" }, { "cve": "CVE-2025-22840", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-22840" } ], "notes": [ { "category": "general", "text": "Sequence of processor instructions leads to unexpected behavior for some Intel(R) Xeon(R) 6 Scalable processors may allow an authenticated user to potentially enable escalation of privilege via local access", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-22840", "url": "https://www.suse.com/security/cve/CVE-2025-22840" }, { "category": "external", "summary": "SUSE Bug 1248438 for CVE-2025-22840", "url": "https://bugzilla.suse.com/1248438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-09-02T17:42:12Z", "details": "important" } ], "title": "CVE-2025-22840" }, { "cve": "CVE-2025-22889", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-22889" } ], "notes": [ { "category": "general", "text": "Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-22889", "url": "https://www.suse.com/security/cve/CVE-2025-22889" }, { "category": "external", "summary": "SUSE Bug 1248438 for CVE-2025-22889", "url": "https://bugzilla.suse.com/1248438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.9, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-09-02T17:42:12Z", "details": "important" } ], "title": "CVE-2025-22889" }, { "cve": "CVE-2025-26403", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-26403" } ], "notes": [ { "category": "general", "text": "Out-of-bounds write in the memory subsystem for some Intel(R) Xeon(R) 6 processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-26403", "url": "https://www.suse.com/security/cve/CVE-2025-26403" }, { "category": "external", "summary": "SUSE Bug 1248438 for CVE-2025-26403", "url": "https://bugzilla.suse.com/1248438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-09-02T17:42:12Z", "details": "important" } ], "title": "CVE-2025-26403" }, { "cve": "CVE-2025-32086", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-32086" } ], "notes": [ { "category": "general", "text": "Improperly implemented security check for standard in the DDRIO configuration for some Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-32086", "url": "https://www.suse.com/security/cve/CVE-2025-32086" }, { "category": "external", "summary": "SUSE Bug 1248438 for CVE-2025-32086", "url": "https://bugzilla.suse.com/1248438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.1:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.2:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Micro 5.5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP6:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP7:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server 15 SP5-LTSS:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP5:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Proxy LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "SUSE Manager Server LTS 4.3:ucode-intel-20250812-150200.59.1.x86_64", "openSUSE Leap 15.6:ucode-intel-20250812-150200.59.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-09-02T17:42:12Z", "details": "important" } ], "title": "CVE-2025-32086" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…