CVE-2025-31936 Privilege escalation in Intel(R) Xeon(R) 6 processors when using Intel(R) TDX
A local adversary with privileged access can escalate privileges on Intel Xeon 6 processors using TDX due to improper memory overlap handling.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-31936?
CVE-2025-31936 is a high-severity vulnerability in Intel(R) Xeon(R) 6 processors when using Intel(R) TDX, published on 11 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Weakness: CWE-1260
Which versions are affected by CVE-2025-31936?
It affects 73 products.
Products include Intel Xeon 6315p Firmware, Intel Xeon 6325p Firmware, Intel Xeon 6333p Firmware, Intel Xeon 6337p Firmware, Intel Xeon 6349p Firmware, Intel Xeon 6353p Firmware and 67 more.
How do I fix CVE-2025-31936?
Apply the vendor's patch.
Is CVE-2025-31936 being exploited?
There is no known exploitation of CVE-2025-31936 in the wild and no public exploit code.
Other vulnerabilities in Intel(R) Xeon(R) 6 processors when using Intel(R) TDX
- CVE-2026-20898 Privilege escalation in in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
- CVE-2026-20716 Privilege escalation in Intel(R) Processors
Sources
Also known as DEBIAN-CVE-2025-31936, GHSA-v7w9-9v5r-766h, UBUNTU-CVE-2025-31936.