CVE-2025-31648

描述

Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.

如何修補 CVE-2025-31648

要修補 CVE-2025-31648,請將受影響套件升級到下列已修補版本。

• —升級至 20260210-r0 或更新版本
• —未列出修補版本

CVE-2025-31648 正在被利用嗎?

低 — EPSS 為 0.1%,目前沒有觀察到大規模利用活動。

受影響套件(2)

• from 0, < 20260210-r0
• from 0

CVSS 分數

參考連結(2)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2025-31648
• ADVISORYsecurity.alpinelinux.org/vuln/CVE-2025-31648