CVE-2025-31936: High severity vulnerability
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31936?
CVE-2025-31936 has a risk rating of 38, indicating a moderate to high severity level.
How do I fix CVE-2025-31936?
To mitigate CVE-2025-31936, ensure that your Intel Xeon 6 processors are updated with the latest firmware and security patches from Intel.
What types of attacks does CVE-2025-31936 affect?
CVE-2025-31936 can be exploited by adversaries with privileged access using complex techniques to escalate privileges within the System Management Mode (SMM).
Who is affected by CVE-2025-31936?
CVE-2025-31936 primarily affects systems utilizing Intel Xeon 6 processors with Intel TDX technology.
When was CVE-2025-31936 published?
CVE-2025-31936 was published on August 11, 2026.