PT-2026-40077 · Intel · Intel Processors

Published 2026-05-12 · Updated 2026-05-19 · CVE-2025-35979

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Intel(R) Processors (affected versions not specified)

Description Shared microarchitectural predictor state that influences transient execution for some processors within VMX non-root (guest) operation may lead to information disclosure. An unprivileged software adversary with authenticated user access could potentially enable data exposure through a high complexity local attack requiring no user interaction.

Recommendations Update to the ucode-intel-20260512-1.1 package.

Fix

Weakness Enumeration

CWE-1423

Related Identifiers

CVE-2025-35979

OPENSUSE-SU-2026:10783-1

Affected Products

Intel Processors

References · 14

• https://osv.dev/vulnerability/UBUNTU-CVE-2025-35979 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-35979 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10783-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-35979 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-35979 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-35979 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-35979 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-35979 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-35979 · Vendor Advisory
• https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260512 · Note
• https://security.alpinelinux.org/vuln/CVE-2025-35979 · Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html · Note
• https://suse.com/security/cve/CVE-2025-35979 · Note
• https://docs.bell-sw.com/security/cves/CVE-2025-35979 · Note