diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index 04e831329343..918059cc4f92 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,69 @@ + + Intel CPUs -- multiple vulnerabilities + + + cpu-microcode-intel + 20250211 + + + + +

Intel reports:

+
+

+ A potential security vulnerability in some Intel Processors may allow + denial of service. Intel released microcode updates to mitigate this + potential vulnerability. +

+
+
+

+ A potential security vulnerability in some Intel Software Guard + Extensions (Intel SGX) Platforms may allow denial of service. Intel + is released microcode updates to mitigate this potential + vulnerability. +

+
+
+

+ Potential security vulnerabilities in the UEFI firmware for some Intel + Processors may allow escalation of privilege, denial of service, or + information disclosure. Intel released UEFI firmware and CPU microcode + updates to mitigate these potential vulnerabilities. +

+
+
+

+ A potential security vulnerability in some 13th and 14th Generation + Intel Coreā„¢ Processors may allow denial of service. Intel released + microcode and UEFI reference code updates to mitigate this potential + vulnerability. +

+
+
+

+ A potential security vulnerability in the Intel Data Streaming + Accelerator (Intel DSA) for some Intel Xeon Processors may allow + denial of service. Intel released software updates to mitigate this + potential vulnerability. +

+
+ +
+ + CVE-2024-31068 + CVE-2024-36293 + CVE-2023-43758 + CVE-2024-39355 + CVE-2024-37020 + https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250211 + + + 2025-02-11 + 2025-02-12 + +
+ OpenSSL -- Man-in-the-Middle vulnerability