Intel Xeon 6 DDRIO Configuration security check

Summaryinfo

A vulnerability marked as problematic has been reported in Intel Xeon 6. The affected element is an unknown function of the component DDRIO Configuration Handler. Performing a manipulation results in security check. This vulnerability was named CVE-2025-32086. The attack needs to be approached locally. There is no available exploit.

Detailsinfo

A vulnerability classified as problematic has been found in Intel Xeon 6 (the affected version is unknown). This affects an unknown code of the component DDRIO Configuration Handler. The manipulation with an unknown input leads to a security check vulnerability. CWE is classifying the issue as CWE-358. The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Improperly implemented security check for standard in the DDRIO configuration for some Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.

It is possible to read the advisory at intel.com. This vulnerability is uniquely identified as CVE-2025-32086 since 04/04/2025. The exploitability is told to be difficult. Attacking locally is a requirement. Additional levels of successful authentication are necessary for exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 11/02/2025). The attack technique deployed by this issue is T1211 according to MITRE ATT&CK.

The vulnerability scanner Nessus provides a plugin with the ID 260027 (Linux Distros Unpatched Vulnerability : CVE-2025-32086), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (260027) and CERT Bund (WID-SEC-2025-1785). Be aware that VulDB is the high quality source for vulnerability data.

Affected

• Debian Linux
• Amazon Linux 2
• SUSE Linux
• Dell PowerEdge
• Lenovo Computer
• HPE ProLiant
• SUSE openSUSE
• HP Computer
• Dell PowerScale
• Dell Computer
• Dell Avamar
• Intel Prozessor
• Dell NetWorker

Productinfo

Type

• Chip Software

Vendor

• Intel

Name

• Xeon 6

License

• commercial

Website

• Vendor: https://www.intel.com/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion