CVE-2025-31936
Received Received - Intake

Privilege Escalation in Intel Xeon 6 Processors via SMM

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: Intel Corporation

Description
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2025-31936
EUVD
EUVD-2025-210690

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel xeon 6

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1260 The product allows address regions to overlap, which can result in the bypassing of intended memory protection.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper handling of protected memory ranges in some Intel Xeon 6 processors when using Intel Trust Domain Extensions (TDX) within System Management Mode (SMM). An attacker with privileged access and special internal knowledge could exploit this to escalate privileges.

Detection Guidance

Detection requires specialized knowledge of Intel TDX and SMM environments. No standard commands are provided in the CVE details. Consult Intel's official documentation or security advisories for detection methods.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain higher privileges on the system, potentially leading to unauthorized access or control. It may impact system confidentiality and integrity but does not directly affect availability.

Mitigation Strategies

Apply Intel's official firmware updates or patches for affected Xeon 6 processors. Disable Intel TDX in SMM if not required. Monitor Intel's security advisories for further guidance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-31936. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart