Critical Out-of-Bounds Write Vulnerability in Intel Microcode Packages
Summary
UBUNTU-CVE-2025-26403: Out-of-bounds write in the memory subsystem for some Intel(R) Xeon(R) 6 processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access. Affects intel-microcode versions 1.20130906.1ubuntu2 – 3.20210608.0ubuntu0.14.04.1+esm1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Intel Microcode package is essential for updating the microcode of Intel processors, enhancing performance and security. It acts as a bridge between the operating system and the hardware, ensuring that the CPU operates correctly and securely. However, certain versions of this package are vulnerable to an out-of-bounds write issue, particularly affecting Intel Xeon processors when using Intel SGX or TDX technologies.
Vulnerability Detail
The vulnerability arises from an out-of-bounds write in the memory subsystem of some Intel Xeon 6 processors. This flaw can potentially allow a privileged user to escalate their privileges via local access, leading to unauthorized access to sensitive information or system control. The technical implications are significant, as it compromises the integrity and confidentiality of the system, making it critical for users to address this issue promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected systems to trusted personnel only, thereby reducing the risk of privilege escalation until the package is updated.
Conclusion
The out-of-bounds write vulnerability in Intel Microcode packages poses a significant risk to systems using affected Intel Xeon processors. Users are strongly advised to update their packages to the latest versions to mitigate this risk and ensure the security of their systems.
See every vulnerability recorded for intel-microcode →
FAQ
The CVSS score of this vulnerability is 7.2, indicating a high severity level.
Affected versions include intel-microcode versions prior to 3.20250512.0ubuntu0.22.04.1 across various Ubuntu LTS releases.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The potential consequences include unauthorized access to sensitive data and the ability to execute arbitrary code with elevated privileges.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for intel-microcode.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
