Loading story…
Intel issued a broad security update spanning 42 advisories and 72 vulnerabilities across processors, firmware, management components, drivers, and software, while a related CPU microcode release fixed eight processor security issues affecting product lines including Xeon 6, Core Ultra, 3rd Gen Xeon Scalable, and 10th Gen and newer Intel Core chips. Reported impacts include escalation of privilege, information disclosure, denial of service, and local code execution, with several flaws tied to Intel TDX, transient execution behavior, firmware control flow, and hardware logic race conditions.
The microcode package also added first-time support updates for Bartlett Lake and Wildcat Lake, alongside non-security functional fixes. Intel's Security Center advisory catalog shows the vendor's updates cover a wide range of platforms, including graphics, wireless, Ethernet, UEFI and server firmware, and developer software such as oneAPI, OpenVINO, and Gaudi, underscoring that the release was part of a larger coordinated remediation effort across Intel's hardware and software ecosystem.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
12 events from the most recent confirmed update back to the earliest known activity.
Intel published CPU microcode updates dated 20260811 to address eight security issues affecting multiple processor families, including Xeon 6, Core Ultra, 3rd Gen Xeon Scalable, and Intel Core Gen10 and newer. The release also introduced the first new microcode images for Bartlett Lake and Wildcat Lake and fixed additional functional issues.
Intel issued INTEL-SA-01409, titled "Intel Xeon 6 Processors with P-cores with Intel TDX Connect Advisory."
Intel published multiple advisories on November 11, 2025, including INTEL-SA-01400, INTEL-SA-01398, INTEL-SA-01395, INTEL-SA-01378, INTEL-SA-01376, INTEL-SA-01374, INTEL-SA-01366, and INTEL-SA-01356 covering server utility software, PROSet/Wireless WiFi, Slim Bootloader, UEFI server firmware, Ethernet drivers, Gaudi software, oneAPI MKL, and graphics.
Intel listed an updated date of September 9, 2025 for INTEL-SA-01300, indicating the previously published UEFI Reference Server Firmware advisory was updated.
Intel listed updated dates of August 18, 2025 for INTEL-SA-01367, INTEL-SA-01313, and INTEL-SA-01312, indicating those previously published advisories were updated or republished.
Intel published a coordinated set of advisories on August 12, 2025, including INTEL-SA-01383, INTEL-SA-01367, INTEL-SA-01313, INTEL-SA-01312, INTEL-SA-01311, INTEL-SA-01310, INTEL-SA-01308, and INTEL-SA-01300 covering SGX SDK tooling, Xeon 6 firmware, IPU firmware, TDX modules, OOBM services, scalable processors, and UEFI reference server firmware.
Intel published multiple advisories on May 13, 2025, including INTEL-SA-01290, INTEL-SA-01269, INTEL-SA-01247, and INTEL-SA-01244 covering Xeon 6 processors with E-cores, SGX and TDX, and 2025.2 IPU updates.
Intel issued INTEL-SA-01153, titled "2025.1 IPU -Intel Processor Advisory."
Intel published a coordinated set of advisories on February 11, 2025, including INTEL-SA-01240, INTEL-SA-01237, INTEL-SA-01203, INTEL-SA-01124, and INTEL-SA-00606 covering MLC software, BIOS and system firmware update packages, UEFI firmware, SPS firmware, and Wireless Bluetooth/Killer Bluetooth.
Intel issued INTEL-SA-00773, an advisory for OpenSSL vulnerabilities CVE-2022-3786 and CVE-2022-3602 affecting Intel software products.
Intel issued INTEL-SA-00470, an advisory covering Apache Log4j2 vulnerabilities CVE-2021-44228 and CVE-2021-45046 affecting Intel products.
Intel and AMD announced Patch Tuesday updates addressing more than 80 vulnerabilities across their products. Intel published 42 advisories covering 72 vulnerabilities, while AMD published five advisories covering roughly a dozen vulnerabilities.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
3 references tracked. Mallory keeps watching after this page renders.
securityweek.com
Open sourcephoronix.com
Open sourceintel.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Intel disclosed and patched several vulnerabilities affecting **Intel Xeon** server processors, including firmware and trusted execution flaws that can lead to **local privilege escalation** and, in one case, denial of service. In advisory **`INTEL-SA-01313`**, Intel said **`CVE-2025-20053`** and **`CVE-2025-24305`** affect multiple Xeon families, including 4th and 5th Gen Xeon Scalable, Xeon W2400/W3400, and some Xeon 6 products, with the bugs tied to **SGX** buffer handling and **ACTM** firmware control flow. Intel also noted **`CVE-2025-21090`** as a local denial-of-service issue and said the vulnerabilities were discovered internally, with mitigations delivered through firmware updates from system manufacturers. Intel separately issued **`INTEL-SA-01367`** for **Xeon 6 Birch Stream** processors, covering **`CVE-2025-26403`** and **`CVE-2025-32086`**, two high-severity flaws that affect systems using **`SGX`** or **`TDX`** and could let a privileged local user escalate privileges through out-of-bounds writes or improper security checks. Related reporting also highlighted additional Xeon 6 risks involving **OOB-MSM** access control (**`CVE-2025-22839`**), **TDX** memory-range overlap handling (**`CVE-2025-22889`**), and instruction-sequence-triggered privilege escalation (**`CVE-2025-22840`**), underscoring continued exposure in confidential computing and hardware management features. Intel released microcode and firmware mitigations and advised customers to install the latest updates from their OEM or system vendor.
Jun 29, 2026
Intel disclosed multiple vulnerabilities in Linux kernel-mode Ethernet drivers for its **700 Series**, **800 Series**, and **I350 Series** network adapters, warning that authenticated local users could exploit the flaws for **privilege escalation**, **information disclosure**, or **denial of service**. The most severe issue listed in `INTEL-SA-01296` is **CVE-2025-24325**, rated **CVSS 4.0 9.3 Critical**, affecting some Intel 800 Series Ethernet drivers before version `1.17.2`; Intel said the advisory covers eight CVEs tied to improper input validation, insufficient control flow management, exceptional-condition handling, and integer overflow. A separate advisory, `INTEL-SA-01335`, covers Intel 700 Series and I350 Series Linux drivers, including 700 Series flaws such as **CVE-2025-24486**, **CVE-2025-21086**, and **CVE-2025-25273**, which can expose vulnerable kernel code paths in the `i40e` driver and potentially lead to root-level compromise on affected Linux systems. Intel said affected 700 Series driver versions earlier than `2.28.5` and I350 Series driver versions earlier than `5.19.2` should be upgraded, while 800 Series deployments should move to `1.17.2` or later; fixes are also available through the **Intel Ethernet Adapter Complete Driver Pack** version `30.0.1` or later. The impacted hardware spans widely deployed enterprise and cloud platforms, including Intel **I710**, **X710**, **XL710**, **XXV710**, **V710**, **X722**, and multiple Xeon- and Atom-based systems. Intel said the vulnerabilities were discovered internally and released under coordinated disclosure after mitigations became available, and public reporting indicated no proof-of-concept exploit had been released for the highlighted 700 Series issues at the time of publication.
Jun 29, 2026
**Intel** published security advisories on March 10, 2026 covering vulnerabilities across multiple products, prompting the Canadian Centre for Cyber Security to recommend reviewing Intel’s guidance and applying mitigations and updates. In parallel, **F5** issued a product security advisory for **CVE-2025-20109**, an **Intel CPU vulnerability**, indicating potential downstream impact to vendors whose appliances or platforms rely on affected Intel processors. Separate from the Intel CPU issue, the Canadian Centre for Cyber Security also relayed routine upstream patch activity from **Ubuntu** and **Red Hat** between March 2–8, 2026, including **Linux kernel** security updates across multiple supported releases and platforms. These Linux distribution advisories are not specific to CVE-2025-20109 and should be tracked as independent patching items for organizations running affected Ubuntu LTS versions and Red Hat Enterprise Linux variants.
Jun 29, 2026