Privilege Escalation Vulnerability in Intel Microcode Packages
Summary
UBUNTU-CVE-2025-32086: Improperly implemented security check for standard in the DDRIO configuration for some Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of... Affects intel-microcode versions 1.20130906.1ubuntu2 – 3.20210608.0ubuntu0.14.04.1+esm1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Intel microcode is a critical component that provides updates to the processor's firmware, enhancing performance and security. It is essential for maintaining the stability and security of Intel processors, particularly in enterprise environments. The vulnerability in question affects several versions of the intel-microcode package across multiple Ubuntu LTS releases, potentially exposing systems to privilege escalation attacks.
Vulnerability Detail
The vulnerability stems from an improperly implemented security check in the DDRIO configuration for certain Intel Xeon 6 processors when utilizing Intel SGX or Intel TDX. This flaw allows a privileged user to potentially escalate their privileges via local access, which could lead to unauthorized access to sensitive data or system controls. The vulnerability has been assigned a CVSS score of 7.2, indicating a medium severity level that necessitates prompt attention.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, consider restricting local access to systems running the affected versions of the intel-microcode package until the update can be applied. This may involve implementing stricter user access controls or disabling certain functionalities that rely on the vulnerable microcode.
Conclusion
In summary, the privilege escalation vulnerability in the intel-microcode package poses a significant risk to systems running affected versions of Ubuntu. Promptly updating to the latest patched version is essential to mitigate this risk. Additionally, utilizing tools like Vulert can help monitor and alert for open-source vulnerabilities in your software.
See every vulnerability recorded for intel-microcode →
FAQ
The vulnerability allows a privileged user to escalate their privileges, potentially leading to unauthorized access to sensitive data or system controls.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The affected versions include Ubuntu 14.04 LTS, 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, 24.04 LTS, and 25.04.
The CVSS score of this vulnerability is 7.2, indicating a medium severity level.
It is recommended to regularly check for updates to the intel-microcode package, especially after security advisories are released.
Related vulnerabilities
Recent vulnerabilities recorded for intel-microcode.
