Описание
Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.
Отчет
Moderate impact in Red Hat Enterprise Linux: an unauthenticated user with physical access may exploit incorrect behavior ordering in some Intel Core Ultra processors to potentially disclose information through the microcode_ctl component. RHEL 8 and RHEL 6/7 Extended Life Cycle streams are marked DEFER; the current record gives no more specific reason for that deferral, and the residual risk is potential information disclosure on systems with affected processors when physical access is available. RHEL 9 streams are marked DELEGATED as affected, and a fix is being pursued. RHEL 10 is not affected because the vulnerable code is not present. Red Hat's CVSS 3.1 assessment is 5.6 (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N), versus the upstream CVSS 3.1 score of 4.9 (AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N); the difference reflects Red Hat's assessment of local access, low privileges, and changed scope, while exploitation remains high-complexity and requires physical access according to the current vulnerability description.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | microcode_ctl | Not affected | ||
| Red Hat Enterprise Linux 6 | microcode_ctl | Fix deferred | ||
| Red Hat Enterprise Linux 7.7 Advanced Update Support | microcode_ctl | Fixed | RHSA-2025:10111 | 01.07.2025 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | microcode_ctl | Fixed | RHSA-2025:10108 | 01.07.2025 |
| Red Hat Enterprise Linux 8 | microcode_ctl | Fixed | RHSA-2025:10991 | 14.07.2025 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | microcode_ctl | Fixed | RHSA-2025:10126 | 01.07.2025 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | microcode_ctl | Fixed | RHSA-2025:10107 | 01.07.2025 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | microcode_ctl | Fixed | RHSA-2025:10109 | 01.07.2025 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | microcode_ctl | Fixed | RHSA-2025:10109 | 01.07.2025 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | microcode_ctl | Fixed | RHSA-2025:10109 | 01.07.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
5.6 Medium
CVSS3
Связанные уязвимости
Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.
Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.
Incorrect behavior order for some Intel(R) Core\u2122 Ultra Processors ...
Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.
Уязвимость микропрограммного обеспечения процессоров Intel Core Ultra, связанная с выполнением действий в неправильном порядке, позволяющая нарушителю раскрыть защищаемую информацию
EPSS
5.6 Medium
CVSS3