CVE-2025-31938: Medium severity vulnerability
Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31938?
CVE-2025-31938 has been assessed with a risk rating of 38, indicating a medium severity level.
What does CVE-2025-31938 affect?
CVE-2025-31938 affects some Intel Xeon 6 Scalable processors with Intel TDX, particularly regarding insufficient access control granularity.
How can I mitigate the risks associated with CVE-2025-31938?
To mitigate CVE-2025-31938, it's crucial to implement proper access controls and monitor for unauthorized attempts to access sensitive data.
Who is vulnerable to CVE-2025-31938?
Organizations using affected Intel Xeon 6 Scalable processors with Intel TDX may be particularly vulnerable to CVE-2025-31938.
What kind of attack does CVE-2025-31938 enable?
CVE-2025-31938 potentially allows an authenticated adversary to execute a high complexity attack leading to information disclosure.