{"schemaVersion":3,"id":"SUSE-SU-2025:03116-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for microcode_ctl\n\nThis update for microcode_ctl fixes the following issues:\n\n- Intel CPU Microcode was updated to the 20250812 release (bsc#1248438)\n     - CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable escalation of privilege via local access.\n     - CVE-2025-22840: Sequence of processor instructions leads to unexpected behavior for some Intel Xeon 6 Scalable processors may allow an authenticated user to potentially enable escalation of privilege via local access\n     - CVE-2025-22839: Insufficient granularity of access control in the OOB-MSM for some Intel Xeon 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.\n     - CVE-2025-22889: Improper handling of overlap between protected memory ranges for some Intel Xeon 6 processor with Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.\n     - CVE-2025-20053: Improper buffer restrictions for some Intel Xeon Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access.\n     - CVE-2025-26403: Out-of-bounds write in the memory subsystem for some Intel Xeon 6 processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.\n     - CVE-2025-32086: Improperly implemented security check for standard in the DDRIO configuration for some Intel Xeon 6 Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.\n     - Update for functional issues.\n     - Updated Platforms:\n\n       | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products\n       |:---------------|:---------|:------------|:---------|:---------|:---------\n       | ARL-H          | A1       | 06-c5-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2)\n       | ARL-S/HX (8P)  | B0       | 06-c6-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2)\n       | EMR-SP         | A1       | 06-cf-02/87 | 210002a9 | 210002b3 | Xeon Scalable Gen5\n       | GNR-AP/SP      | B0       | 06-ad-01/95 | 010003a2 | 010003d0 | Xeon Scalable Gen6\n       | GNR-AP/SP      | H0       | 06-ad-01/20 | 0a0000d1 | 0a000100 | Xeon Scalable Gen6\n       | ICL-D          | B0       | 06-6c-01/10 | 010002d0 | 010002e0 | Xeon D-17xx, D-27xx\n       | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d000404 | 0d000410 | Xeon Scalable Gen3\n       | LNL            | B0       | 06-bd-01/80 | 0000011f | 00000123 | Core Ultra 200 V Series Processor\n       | MTL            | C0       | 06-aa-04/e6 | 00000024 | 00000025 | Core™ Ultra Processor\n       | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004128 | 00004129 | Core Gen13\n       | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004128 | 00004129 | Core Gen13\n       | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0003f7 | 2c000401 | Xeon Max\n       | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4\n       | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4\n       | SRF-SP         | C0       | 06-af-03/01 | 03000341 | 03000362 | Xeon 6700-Series Processors with E-Cores\n\n  New Disclosures Updated in Prior Releases:\n  All ADL, RPL, SPR, EMR, MTL, ARL Microcode patches previously released in May 2025.","dates":{"published":"2025-09-09T10:57:16.000Z","modified":"2026-02-04T03:37:37.554Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"microcode_ctl&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"microcode_ctl","label":"microcode_ctl&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/microcode_ctl&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 1.17-102.83.87.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17-102.83.87.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503116-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-202503116-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1248438","label":"bugzilla.suse.com/1248438","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2025-20053","label":"www.suse.com/security/cve/CVE-2025-20053","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-20109","label":"www.suse.com/security/cve/CVE-2025-20109","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22839","label":"www.suse.com/security/cve/CVE-2025-22839","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22840","label":"www.suse.com/security/cve/CVE-2025-22840","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22889","label":"www.suse.com/security/cve/CVE-2025-22889","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-26403","label":"www.suse.com/security/cve/CVE-2025-26403","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32086","label":"www.suse.com/security/cve/CVE-2025-32086","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2025-20053","CVE-2025-20109","CVE-2025-22839","CVE-2025-22840","CVE-2025-22889","CVE-2025-26403","CVE-2025-32086"],"downstream":[],"duplicates":[],"related":["CVE-2025-20053","CVE-2025-20109","CVE-2025-22839","CVE-2025-22840","CVE-2025-22889","CVE-2025-26403","CVE-2025-32086"]},"timeline":[{"kind":"published","date":"2025-09-09T10:57:16.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:37:37.554Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T03:57:41.904Z","stale":false,"partial":false}}