Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21736-1

Опубликовано: 02 сент. 2026
Источник: suse-cvrf

Описание

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)

    • Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.

  • Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)

    • Security updates for INTEL-SA-01379 / CVE-2025-31936
    • Security updates for INTEL-SA-01404 / CVE-2025-31938
    • Security updates for INTEL-SA-01423 / CVE-2026-20917
    • Security updates for INTEL-SA-01428 / CVE-2025-35973
    • Security updates for INTEL-SA-01435 / CVE-2026-20716
    • Security updates for INTEL-SA-01441 / CVE-2026-20760
    • Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
    • Security updates for INTEL-SA-01443 / CVE-2026-20707
    • Update for functional issues.

  • Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)

    • CVE-2025-35979: Security updates for INTEL-SA-01420

    • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html

    • Update for various functional issues.

      New Platforms
      ProcessorSteppingF-M-S/PIOld VerNew VerProducts
      PTL 404A106-cc-03/900000011bIntel Core Ultra Processor (Series 3)
      PTL-H 484/12XeA0/B006-cc-02/900000011bIntel Core Ultra Processor (Series 3)
      Updated Platforms
      ProcessorSteppingF-M-S/PIOld VerNew VerProducts
      ARL-HA106-c5-02/820000011b00000121Core Ultra Processor (Series 2)
      ARL-S/HX (8P)B006-c6-02/820000011b00000121Core Ultra Processor (Series 2)
      EMR-SPA106-cf-02/87210002d3210002e0Xeon Scalable Gen5
      GNR-AP/SPBx/Hx/Lx06-ad-01/950100040501000423Xeon 6900/6700/6500 Series Processors with P-Cores
      GNR-DB0/B106-ae-01/970100030301000307Xeon 6700P-B/6500P-B Series SoC with P-Cores
      GNR-SP R1SBx/Hx/Lx06-ad-01/200a0001330a000142Xeon 6700/6500-Series Processors with P-Cores
      LNLB006-bd-01/800000012500000126Core Ultra 200 V Series Processor
      SPR-SPE4/S206-8f-07/872b0006612b000670Xeon Scalable Gen4
      SPR-SPE5/S306-8f-08/872b0006612b000670Xeon Scalable Gen4
      SRF-AP/SPC006-af-03/0103000382030003a3Xeon 6900/6700-Series Processors with E-Cores

  • Update to microcode-20260227:

    • Update for functional issues. Refer to Intel® Xeon® 6700P-B/6500P-B-Series SoC with P-Cores for details.

      Updated Platforms
      ProcessorSteppingF-M-S/PIOld VerNew VerProducts
      GNR-DB0/B106-ae-01/97010002f301000303Xeon 6700P-B/6500P-B Series SoC with P-Cores

Список пакетов

openSUSE Leap 16.0
ucode-intel-20260812-160000.1.1

Ссылки

Описание

Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Затронутые продукты
openSUSE Leap 16.0:ucode-intel-20260812-160000.1.1
Ссылки

Описание

Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.

Затронутые продукты
openSUSE Leap 16.0:ucode-intel-20260812-160000.1.1
Ссылки

Описание

Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.

Затронутые продукты
openSUSE Leap 16.0:ucode-intel-20260812-160000.1.1
Ссылки

Описание

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-root (guest) operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.

Затронутые продукты
openSUSE Leap 16.0:ucode-intel-20260812-160000.1.1
Ссылки

Описание

Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.

Затронутые продукты
openSUSE Leap 16.0:ucode-intel-20260812-160000.1.1
Ссылки

Описание

Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.

Затронутые продукты
openSUSE Leap 16.0:ucode-intel-20260812-160000.1.1
Ссылки

Описание

Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Затронутые продукты
openSUSE Leap 16.0:ucode-intel-20260812-160000.1.1
Ссылки

Описание

Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Затронутые продукты
openSUSE Leap 16.0:ucode-intel-20260812-160000.1.1
Ссылки

Описание

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Затронутые продукты
openSUSE Leap 16.0:ucode-intel-20260812-160000.1.1
Ссылки

Описание

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.

Затронутые продукты
openSUSE Leap 16.0:ucode-intel-20260812-160000.1.1
Ссылки
Уязвимость openSUSE-SU-2026:21736-1