Insufficient Input Validation in Intel Xeon and Atom Processors

CVE-2019-11137

What is CVE-2019-11137?

Insufficient input validation in the system firmware of various Intel Xeon and Atom processors allows privileged users local access to potentially trigger escalation of privilege, cause denial of service, and lead to unintended information disclosure. The affected products include multiple Xeon processor families and Atom processor series, posing risks if exploited in environments that require robust hardware security.

References