CVE-2025-35987
Description
A flaw was found in the kernel, specifically within Intel(R) Software Guard Extensions Data Center Attestation Primitives. An authorized attacker with privileged user access and special internal knowledge could exploit an omission of security-relevant information. This local attack, despite its high complexity, may lead to data alteration and a denial of service, impacting the system's integrity and availability.
Statement
Red Hat evaluates this vulnerability as having a Moderate impact because exploitation requires local access with already elevated privileges, highly specialized conditions, and high attack complexity. The flaw affects environments deploying Intel Software Guard Extensions (SGX) with Data Center Attestation Primitives (DCAP), which is not utilized on systems without SGX hardware support or attestation workloads. Even when present, an attacker must already possess administrative control to manipulate attestation data or cause a localized denial of service, limiting the overall blast radius.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Access Control
Technical Impact: Modify Memory; Read Memory; Execute Unauthorized Code or Commands; Gain Privileges or Assume Identity; Bypass Protection Mechanism; Other
A common weakness that can exist in such protection schemes is that access controls or policies are not granular enough, which renders the control policy too broad, because it allows accesses from unauthorized agents to security-sensitive assets. This condition allows agents beyond trusted agents to access assets and could lead to a loss of functionality or the ability to set up the device securely. This further results in security risks from leaked, sensitive, key material to modification of device configuration.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
