Is CVE-2025-31936 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-31936 being exploited in the wild.

How severe is CVE-2025-31936?

Medium severity, with a CVSS score of 5.7, published 11 August 2026.

Which products and versions are affected?

Intel Xeon 6 Birch Stream (A06D1, A06E1) and Kaseyville (A06E1).

Is there a fix for CVE-2025-31936?

A patch was published on 2026-08-11: Microcode updates released via GitHub repository Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-31936 attacked?

It is attacked with local access.

Am I affected by CVE-2025-31936?

Check whether you run Intel Xeon 6, Intel Xeon 6315p, Intel Xeon 6315p Firmware or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-31936: Intel Xeon 6 privilege escalation in TDX SMM memory range handling

CVE-2025-31936 · Severity: medium · CVSS 5.7 · Published 2026-08-11

Intel Xeon 6 processors with Trust Domain Extensions (TDX) contain a firmware vulnerability that improper handles protected memory ranges when operating in System Management Mode (SMM). An attacker with privileged access and specialized hardware knowledge could exploit this to escalate privileges and potentially compromise system confidentiality and integrity. Intel has released microcode updates to address this issue.

Vendors: Intel.

Quick answers

Is CVE-2025-31936 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-31936 being exploited in the wild.
How severe is CVE-2025-31936?: Medium severity, with a CVSS score of 5.7, published 11 August 2026.
Which products and versions are affected?: Intel Xeon 6 Birch Stream (A06D1, A06E1) and Kaseyville (A06E1).
Is there a fix for CVE-2025-31936?: A patch was published on 2026-08-11: Microcode updates released via GitHub repository Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-31936 attacked?: It is attacked with local access.
Am I affected by CVE-2025-31936?: Check whether you run Intel Xeon 6, Intel Xeon 6315p, Intel Xeon 6315p Firmware or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability involves improper handling of overlap between protected memory ranges in Intel Xeon 6 processors when TDX operates within SMM. The flaw permits privilege escalation through a local attack vector requiring high complexity and privileged user access combined with specialized internal knowledge. An attacker with SMM-level privileges could exploit the memory range handling logic to escalate privileges and potentially access or modify sensitive data on the affected system. Intel has released microcode updates available via their GitHub repository to mitigate this issue.

Affected products

Intel Xeon 6 Birch Stream (A06D1, A06E1) and Kaseyville (A06E1)

Timeline

2026-08-11: disclosed: Intel security advisory INTEL-SA-01379 published
2026-08-11: patched: Microcode updates released via GitHub repository

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.