PT-2026-7299 · Intel+2 · Intel Processor Family+2

Published 2026-02-10 · Updated 2026-03-19 · CVE-2025-31648

Positive Technologies (AI Summary)

CVSS v3.1

3.9

Low

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Processor Family (affected versions not specified)

Description An issue involving improper handling of values in the microcode flow may allow for escalation of privilege. A local attacker with a privileged user account, high attack complexity, and special internal knowledge can potentially exploit this issue without requiring user interaction. The issue may impact system confidentiality and integrity, but not availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-229

Related Identifiers

BDU:2026-01872

CVE-2025-31648

MGASA-2026-0043

OESA-2026-1440

OPENSUSE-SU-2026:10229-1

OPENSUSE-SU-2026:20401-1

SUSE-SU-2026:0668-1

SUSE-SU-2026:0669-1

SUSE-SU-2026:0670-1

SUSE-SU-2026:20522-1

SUSE-SU-2026:20682-1

SUSE-SU-2026:20758-1

SUSE-SU-2026:20941-1

USN-8068-1

Affected Products

Intel Processor Family

Linuxmint

Ubuntu

References · 45

• https://ubuntu.com/security/notices/USN-8068-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01872 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-31648 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-31648 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2026-0043 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1440 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-31648 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0668-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-31648 · Security Note
• https://ubuntu.com/security/CVE-2025-31648 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20401-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-31648 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20941-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8068-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10229-1 · Vendor Advisory