CVE-2025-35979

Name
CVE-2025-35979
Description
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-root (guest) operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.
NVD Severity
unknown
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
secure@intel.com https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html

Match rules

CPE URI Source package Min version Max version

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
intel-ucode edge-main 20260512-r0 omni <omni+alpine@hack.org> fixed
intel-ucode 3.24-main 20260512-r0 omni <omni+alpine@hack.org> fixed
intel-ucode 3.23-main 20260512-r0 omni <omni+alpine@hack.org> fixed
intel-ucode 3.22-main 20260512-r0 omni <omni+alpine@hack.org> fixed
intel-ucode 3.21-main 20260512-r0 omni <omni+alpine@hack.org> fixed
intel-ucode 3.20-main 20260512-r0 omni <omni+alpine@hack.org> fixed