Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2981-1

Опубликовано: 14 июл. 2026
Источник: suse-cvrf

Описание

Security update for ucode-intel

This update for ucode-intel fixes the following issue:

  • CVE-2025-35979: data leaks fixed in 20260512 release (bsc#1265189).

Changes for ucode-intel:

  • Intel CPU Microcode was updated to the 20260512 release (bsc#1265189).

    New Platforms

    ProcessorSteppingF-M-S/PIOld VerNew VerProducts
    PTL 404A106-cc-03/900000011bIntel Core Ultra Processor (Series 3)
    PTL-H 484/12XeA0/B006-cc-02/900000011bIntel Core Ultra Processor (Series 3)

    Updated Platforms

    ProcessorSteppingF-M-S/PIOld VerNew VerProducts
    ARL-HA106-c5-02/820000011b00000121Core Ultra Processor (Series 2)
    ARL-S/HX (8P)B006-c6-02/820000011b00000121Core Ultra Processor (Series 2)
    EMR-SPA106-cf-02/87210002d3210002e0Xeon Scalable Gen5
    GNR-AP/SPBx/Hx/Lx06-ad-01/950100040501000423Xeon 6900/6700/6500 Series Processors with P-Cores
    GNR-DB0/B106-ae-01/970100030301000307Xeon 6700P-B/6500P-B Series SoC with P-Cores
    GNR-SP R1SBx/Hx/Lx06-ad-01/200a0001330a000142Xeon 6700/6500-Series Processors with P-Cores
    LNLB006-bd-01/800000012500000126Core Ultra 200 V Series Processor
    SPR-SPE4/S206-8f-07/872b0006612b000670Xeon Scalable Gen4
    SPR-SPE5/S306-8f-08/872b0006612b000670Xeon Scalable Gen4
    SRF-AP/SPC006-af-03/0103000382030003a3Xeon 6900/6700-Series Processors with E-Cores

Список пакетов

SUSE Linux Enterprise Server 12 SP5-LTSS
ucode-intel-20260512-161.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
ucode-intel-20260512-161.1

Ссылки

Описание

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-root (guest) operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:ucode-intel-20260512-161.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ucode-intel-20260512-161.1
Ссылки
Уязвимость SUSE-SU-2026:2981-1