Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:HDebian
OSDebian11.012.0Fedora Project Fedora
OSFedoraproject38Intel Xeon Gold 5315y
HWIntelall versionsIntel Xeon Gold 5315y Firmware
OSIntelall versionsIntel Xeon Gold 5317
HWIntelall versionsIntel Xeon Gold 5317 Firmware
OSIntelall versionsIntel Xeon Gold 5318h
HWIntelall versionsIntel Xeon Gold 5318h Firmware
OSIntelall versionsIntel Xeon Gold 5318n
HWIntelall versionsIntel Xeon Gold 5318n Firmware
OSIntelall versionsIntel Xeon Gold 5318s
HWIntelall versionsIntel Xeon Gold 5318s Firmware
OSIntelall versionsIntel Xeon Gold 5318y
HWIntelall versionsIntel Xeon Gold 5318y Firmware
OSIntelall versionsIntel Xeon Gold 5320
HWIntelall versionsIntel Xeon Gold 5320 Firmware
OSIntelall versionsIntel Xeon Gold 5320h
HWIntelall versionsIntel Xeon Gold 5320h Firmware
OSIntelall versionsIntel Xeon Gold 5320t
HWIntelall versionsIntel Xeon Gold 5320t Firmware
OSIntelall versionsIntel Xeon Gold 6312u
HWIntelall versionsIntel Xeon Gold 6312u Firmware
OSIntelall versionsIntel Xeon Gold 6314u
HWIntelall versionsIntel Xeon Gold 6314u Firmware
OSIntelall versionsIntel Xeon Gold 6326
HWIntelall versionsIntel Xeon Gold 6326 Firmware
OSIntelall versionsIntel Xeon Gold 6328h
HWIntelall versionsIntel Xeon Gold 6328h Firmware
OSIntelall versionsIntel Xeon Gold 6328hl
HWIntelall versionsIntel Xeon Gold 6328hl Firmware
OSIntelall versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
References
Related vulnerabilities
CVE-2026-24061CRITICAL9.8⚠ KEVPL ✓same product
GNU Inetutils telnetd: ominięcie uwierzytelnienia przez zmienną USER
CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product
Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)
CVE-2025-49113CRITICAL9.9⚠ KEVPL ✓same product
RCE przez deserializację PHP w Roundcube Webmail (parametr _from)
CVE-2025-32433CRITICAL10.0⚠ KEVPL ✓same product
Erlang/OTP SSH — nieuwierzytelniony RCE (CVSS 10.0)
CVE-2025-24201CRITICAL10.0⚠ KEVPL ✓same product
Apple WebKit: out-of-bounds write umożliwiający ucieczkę z sandbox przeglądarki