PT-2025-6637 · Intel+6 · Intel Processors+6

Eason + 1 · Published 2025-02-11 · Updated 2025-12-03 · CVE-2024-31157

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Intel(R) Processors (affected versions not specified)

Description The issue concerns improper initialization in the UEFI firmware OutOfBandXML module, which may allow a privileged user to potentially enable information disclosure via local access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

ALSA-2025:7043

ALT-PU-2025-14707

ALT-PU-2025-15105

BDU:2025-02099

CVE-2024-31157

DLA-4095-1

INFSA-2025_7043

OESA-2025-1171

RHSA-2025:7043

RHSA-2025_7043

Affected Products

Alt Linux

Almalinux

Astra Linux

Debian

Intel Processors

Red Hat

Rocky Linux

References · 44

• https://nvd.nist.gov/vuln/detail/CVE-2024-36293 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-29214 · Security Note
• https://osv.dev/vulnerability/DLA-4095-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-43758 · Security Note
• https://linux.oracle.com/errata/ELSA-2025-7043.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-31068 · Security Note
• https://osv.dev/vulnerability/ALSA-2025:7043 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34440 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-24582 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-39279 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-31157 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-31157 · Security Note
• https://errata.almalinux.org/9/ALSA-2025-7043.html · Vendor Advisory