🛡️ SUSE-SU-2025:20158-1 — ucode-intel (CVE-2024-31068 +3 more)

⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20250211 release (bsc#1237096)
  • Security updates for INTEL-SA-01166

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html

  • CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware

Logic for some Intel Processors may allow privileged user to

potentially enable denial of service via local access.

  • Security updates for INTEL-SA-01213

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html

  • CVE-2024-36293: A potential security vulnerability in some Intel

Software Guard Extensions (Intel SGX) Platforms may allow denial

of service. Intel is releasing microcode updates to mitigate this

potential vulnerability.

  • Security updates for INTEL-SA-01139

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html

  • not clear which CVEs are fixed here, and which are in UEFI BIOS updates.
  • Security updates for INTEL-SA-01228

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html

  • CVE-2024-39355: A potential security vulnerability in some

13th and 14th Generation Intel Core Processors may allow denial

of service. Intel is releasing microcode and UEFI reference code

updates to mitigate this potential vulnerability.

  • Security updates for INTEL-SA-01194

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01194.html

  • CVE-2024-37020: A potential security vulnerability in the Intel

Data Streaming Accelerator (Intel DSA) for some Intel Xeon Processors

may allow denial of service. Intel is releasing software updates to

mitigate this potential vulnerability.

  • Update for functional issues. Refer to Intel Core Ultra Processor

https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.

  • Update for functional issues. Refer to 13th/14th

Generation Intel Core Processor Specification Update

https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.

  • Update for functional issues. Refer to 12th Generation Intel Core

Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436

for details.

  • Update for functional issues. Refer to 11th Gen Intel Core Processor

Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123

for details.

  • Update for functional issues. Refer to 8th and 9th

Generation Intel Core Processor Family Spec Update

https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.

  • Update for functional issues. Refer to 5th Gen

Intel Xeon Scalable Processors Specification Update

https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.

  • Update for functional issues. Refer to 4th Gen

Intel Xeon Scalable Processors Specification Update

https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.

  • Update for functional issues. Refer to 3rd Generation

Intel Xeon Processor Scalable Family Specification Update

https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.

  • Update for functional issues. Refer to Intel Xeon D-2700 Processor

Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071

for details.

  • Update for functional issues. Refer to Intel Xeon E-2300 Processor

Specification Update https://cdrdv2.intel.com/v1/dl/getContent/709192

for details.

  • Update for functional issues. Refer to Intel

Xeon 6700-Series Processor Specification Update

https://cdrdv2.intel.com/v1/dl/getContent/820922 for details.

  • Update for functional issues. Refer to Intel Processors and Intel Core

i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details

New Platforms

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products

|:---------------|:---------|:------------|:---------|:---------|:---------

| SRF-SP | C0 | 06-af-03/01 | | 03000330 |

Xeon 6700-Series Processors with E-Cores

Updated Platforms

| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products

|:---------------|:---------|:------------|:---------|:---------|:---------

| ADL | C0 | 06-97-02/07 | 00000037 | 00000038 | Core Gen12

| ADL | H0 | 06-97-05/07 | 00000037 | 00000038 | Core Gen12

| ADL | L0 | 06-9a-03/80 | 00000435 | 00000436 | Core Gen12

| ADL | R0 | 06-9a-04/80 | 00000435 | 00000436 | Core Gen12

| ADL-N | N0 | 06-be-00/19 | 0000001a | 0000001c |

Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E

| AZB | A0/R0 | 06-9a-04/40 | 00000007 | 00000009 | Intel(R) Atom(R) C1100

| CFL-H | R0 | 06-9e-0d/22 | 00000100 | 00000102 | Core Gen9 Mobile

| CFL-H/S/E3 | U0 | 06-9e-0a/22 | 00000

Affected software

SUSE-SU-2025:20158-1 is recorded against 1 package.

  • ucode-intel (fixed in 20250211-1.1)

Timeline and source

Published on 24 March 2025 and last revised on 23 March 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

www.suse.com (Advisory)
bugzilla.suse.com (Report)
www.suse.com (Web)
www.suse.com (Web)
www.suse.com (Web)
www.suse.com (Web)

Details

Severity Unknown
CVSS Score N/A
CVSS Vector N/A
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2025-03-24
Updated 2026-08-20
Modified 2026-03-23
Fix URL N/A

Affected Packages

Software From version Fixed in
ucode-intel 20250211-1.1

Free Vulnerability Check

Is your site affected by SUSE-SU-2025:20158-1?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against SUSE-SU-2025:20158-1 and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Browse related advisories

All advisoriesSUSESUSE 2025