Security Information Omission in Intel Software Guard Extensions Affecting Data Centers

CVE-2025-35987

What is CVE-2025-35987?

This vulnerability involves the omission of vital security-related information within Intel's Software Guard Extensions Data Center Attestation Primitives at the kernel level (Ring 0). An authorized attacker with privileged access may exploit this weakness to launch a denial of service or alter data. The exploitation requires local access and specialized internal knowledge, posing significant threats to system integrity and availability. Although the vulnerability does not directly compromise confidentiality, it could facilitate subsequent attacks that jeopardize data integrity.

References