CVE-2025-31938
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Insufficient granularity of access control in some Intel Xeon 6 Scalable processors with Intel TDX may allow information disclosure. An authenticated adversary with local access and a high complexity attack can expose data without user interaction. The vulnerability has no direct impact on confidentiality, integrity, or availability but may lead to subsequent high confidentiality impact.
Risk Assessment
Risk of data exposure in environments using Intel TDX, potentially compromising confidentiality. The attack requires an authenticated user and complex conditions, limiting risk.
Recommendation
Apply microcode or firmware updates from Intel. Regularly review Intel security advisories and update systems with Xeon 6 Scalable processors.
Original NVD description (English source)
Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.