CVE catalog

CVE-2025-35979

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-root (guest) operation may allow a

[CVE catalog]

Severity
Medium · CVSS 6.8CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published
Source
[NVD] · [CVE record]
EPSS
0.10% · Oct 25, 2026

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-root (guest) operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianintel-microcodesid3.20260227.1vulnerable
Debianintel-microcodeforky3.20260227.1vulnerable
Debianintel-microcodetrixie3.20251111.1~deb13u1vulnerable
Debianintel-microcodetrixie-security3.20250812.1~deb13u1vulnerable
Debianintel-microcodebookworm3.20251111.1~deb12u1vulnerable
Debianintel-microcodebookworm-security3.20250812.1~deb12u1vulnerable
Cpeintel-microcodeNot reportedNot reportedvulnerable
Alpineintel-ucode3.2020260512-r0fixed
Alpineintel-ucode3.2120260512-r0fixed
Alpineintel-ucode3.2220260512-r0fixed
Alpineintel-ucode3.2320260512-r0fixed
Alpineintel-ucode3.2420260512-r0fixed
Susemicrocode_ctllinux enterprise server 11 sp4 ltss extreme core1.17-102.83.95.1fixed
Suseucode-intellinux enterprise server 12 sp5-ltss20260512-161.1fixed
Suseucode-intellinux enterprise server ltss extended security 12 sp520260512-161.1fixed
Suseucode-intellinux enterprise micro 5.320260512-150200.65.1fixed
Suseucode-intellinux enterprise micro 5.420260512-150200.65.1fixed
Suseucode-intellinux enterprise micro 5.520260512-150200.65.1fixed
Suseucode-intellinux enterprise module for basesystem 15 sp720260512-150200.65.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp4-espos20260512-150200.65.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp4-ltss20260512-150200.65.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp5-espos20260512-150200.65.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp5-ltss20260512-150200.65.1fixed
Suseucode-intellinux enterprise server 15 sp4-ltss20260512-150200.65.1fixed
Suseucode-intellinux enterprise server 15 sp5-ltss20260512-150200.65.1fixed
Suseucode-intellinux enterprise server 15 sp6-ltss20260512-150200.65.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp420260512-150200.65.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp520260512-150200.65.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp620260512-150200.65.1fixed
Opensuseucode-inteltumbleweed20260512-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianintel-microcodesourcesid(unfixed)not yet assignedNot reported[1137032]
Debianintel-microcodesourceforky(unfixed)not yet assignedNot reported[1137032]
Debianintel-microcodesourcetrixie(unfixed)not yet assignedNot reported[1137032]
Debianintel-microcodesourcebookworm(unfixed)not yet assignedNot reported[1137032]
Alpineintel-ucodeapk3.2020260512-r0Not reportedALPINE-CVE-2025-35979Not reported
Alpineintel-ucodeapk3.2120260512-r0Not reportedALPINE-CVE-2025-35979Not reported
Alpineintel-ucodeapk3.2220260512-r0Not reportedALPINE-CVE-2025-35979Not reported
Alpineintel-ucodeapk3.2320260512-r0Not reportedALPINE-CVE-2025-35979Not reported
Alpineintel-ucodeapk3.2420260512-r0Not reportedALPINE-CVE-2025-35979Not reported
Susemicrocode_ctlrpmlinux enterprise server 11 sp4 ltss extreme core1.17-102.83.95.1Not reportedSUSE-SU-2026:3124-1Not reported
Suseucode-intelrpmlinux enterprise server 12 sp5-ltss20260512-161.1Not reportedSUSE-SU-2026:2981-1Not reported
Suseucode-intelrpmlinux enterprise server ltss extended security 12 sp520260512-161.1Not reportedSUSE-SU-2026:2981-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.320260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.420260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.520260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise module for basesystem 15 sp720260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp4-espos20260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp4-ltss20260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp5-espos20260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp5-ltss20260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp4-ltss20260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp5-ltss20260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp6-ltss20260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp420260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp520260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp620260512-150200.65.1Not reportedSUSE-SU-2026:2963-1Not reported
Opensuseucode-intelrpmtumbleweed20260512-1.1Not reportedOPENSUSE-SU-2026:10783-1Not reported

[Debian bug #1137032]

Notes

[trixie] intel-microcode: As usual fixed top-down, expose first in unstable, then likely point release [bookworm] intel-microcode: As usual fixed top-down, expose first in unstable, then likely point release

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [intel-microcode]Affected
    Details (1)

    • 3.20251111.1~deb12u1 · amd64 · bookworm

      Affected

      nvd · intel-microcode · debian · bookworm

[openSUSE Tumbleweed]

  • [ucode-intel]Fixed

    Source package: [ucode-intel]

    Details (1)

    • 20260812-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 20260512-1.1

      nvd · ucode-intel · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]