Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2025-31938 Details

Description

Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

Weakness Enumeration

CWE-IDCWE NameSource
CWE-1220Insufficient Granularity of Access Control[email protected]
CWE-1220Insufficient Granularity of Access ControlCISA-ADP

Affected Products

No affected product data is available for this CVE.

Change History

2 change records found show changes


QUICK INFO

CVE Dictionary Entry:
CVE-2025-31938
NVD Published Date:
Aug 11, 2026
NVD Last Modified:
Aug 12, 2026
Source:
[email protected]
CVE-2025-31938 Details - Not Deferred