Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 420
Alerts This Week
Warning Icon 1 420

SUSE Microcode_ctl Moderate Data Leak CVE-2025-35979 Advisory 2026-3124-1

suse
Calendar Grey July 20, 2026
Scroller Suse
This update for microcode_ctl addresses data leaks in SLES 11 SP4, enhancing system integrity and security.
SUSE released a moderate security update for microcode_ctl addressing CVE-2025-35979, which could lead to data leaks in VMX non-root operations, affecting SUSE Linux Enterprise Ser...

Summary

## This update for microcode_ctl fixes the following issue: * CVE-2025-35979: shared microarchitectural predictor state in VMX non-root operation could lead to data leaks (bsc#1265189). Changes for microcode_ctl: * Intel CPU Microcode was updated to the 20260512 release (bsc#1265189): * Update for various functional issues. ### New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3) ### Updated Platforms | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0

Topics%20covered

Topics Covered

security advisory moderate SuSE system update data leak microcode_ctl

References

* bsc#1265189

Cross-

* CVE-2025-35979

CVSS scores:

* CVE-2025-35979 ( SUSE ): 6.8

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2025-35979 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

* CVE-2025-35979 ( NVD ): 6.8

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected Products:

* SUSE Linux Enterprise Server 11 SP4

* SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

An update that solves one vulnerability can now be installed.

##

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3124-1
Release Date: 2026-07-20T07:01:24Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate SuSE system update data leak microcode_ctl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.