Improper handling of values for some Intel(R) Processors within Ring 0: Kernel…
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- Present
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Partial Red Hat: 4 fixed, 8 without a fix
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.
Summary
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Intel(R) Processors | See references | — | No fix listed | CNA |
- Intel(R) Processors Vendor— Affected See references Fixed in — No fix listed CNA
Remediation
Red Hat 4 advisories
- RHSA-2026:89197 Released 2026-10-27 · Red Hat rating CriticalOpenShift Container Platform 4.22.20 bug fix and security update
- Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202610241758-0, rhcos-ppc64le-4.22.9.8.202610241758-0, rhcos-s390x-4.22.9.8.202610241758-0 +1
- RHSA-2026:68011 Released 2026-09-16 · Red Hat rating Importantmicrocode_ctl security, bug fix, and enhancement update
- Red Hat Enterprise Linux BaseOS (v. 9) microcode_ctl-4:20260210-1.20260812.1.el9_8
- RHSA-2026:67979 Released 2026-09-16 · Red Hat rating Importantmicrocode_ctl security, bug fix, and enhancement update
- Red Hat Enterprise Linux BaseOS (v. 10) microcode_ctl-4:20260812-0.el10_2
Show 1 more Red Hat advisories
- RHSA-2026:65147 Released 2026-09-08 · Red Hat rating Importantmicrocode_ctl security, bug fix, and enhancement update
- Red Hat Enterprise Linux BaseOS (v. 8) microcode_ctl-4:20260812-1.el8_10
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Confidential Compute Attestation | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 6 | Affected | No fix yet |
| Red Hat Enterprise Linux 7 | Affected | No fix yet |
| Red Hat Enterprise Linux 8 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Enterprise Linux for NVIDIA 26 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Container Platform 4 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Container Platform 5 | Affected | No fix yet |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:67979 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2026:65147 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:68011 |
| Red Hat OpenShift Container Platform 4.22 | Fixed | RHSA-2026:89197 |
Not affected: 1 product
- Red Hat Enterprise Linux 10
Timeline
- 2026-10-02 Threatist record created from CVE-2025-35973
- 2026-10-03 Alias added: GHSA-g4r3-3x88-prrw
- 2026-10-13 Affected versions changed · Red Hat
- 2026-10-28 Fix available: Red Hat OpenShift Container Platform 4.22 · Red Hat
- 2026-10-29 Fix available: RHSA-2026:89197 · Red Hat
- 2026-10-30 Affected versions changed · Red Hat
- 2026-11-01 Affected versions changed · Red Hat
Sources
- CVE-2025-35973 · CVE Program
- CVE-2025-35973 · NVD
- FIRST EPSS
- GHSA-g4r3-3x88-prrw · GitHub Advisory Database · CC BY 4.0
- CVE-2025-35973 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences