Database/Firmware, BMC & network fabric
Intel Xeon 6 DDRIO configuration (with SGX or TDX): An improperly implemented security check in DDRIO configuration on
CVSS 7.2CVE-2025-32086Firmware, BMC & network fabriccurated
Impact
An improperly implemented security check in DDRIO configuration on Xeon 6 lets a privileged local user escalate on SGX/TDX-enabled platforms. DDRIO sits between the memory controller and DRAM, which is the layer memory-encryption integrity depends on.
Who can reach it
Privileged local access on a Xeon 6 host with SGX or TDX enabled.
What to do
OEM platform firmware/BIOS update plus TCB recovery for both SGX and TDX. Drain, reboot, re-attest.
References
Related entries
- AMI AptioV UEFI BIOS: Improper handling of insufficient permissions in the BIOS lets a low-privileged local userCVE-2025-58770 · AMI AptioV UEFI BIOSHigh
- Supermicro BMC firmware validation (MBD-X13SEM-F): Second-generation RoT bypassCVE-2025-6198 · Supermicro BMC firmware validation (MBD-X13SEM-F)High
- AMD Pensando ionic driver on ESXi: untrusted pointer dereference lets a guest VM read kernel and co-tenant memoryCVE-2025-62627 · AMD Pensando ionic cloud driver for VMware ESXi (DPU datapath)High
- Supermicro BMC firmware validation (MBD-X12STW): RoT bypass, crafted firmware image acceptedCVE-2025-7937 · Supermicro BMC firmware validation (MBD-X12STW)High
- Supermicro BMC web server request handling on MBD-X13SEDW-F: Any account that can log into the BMC web interface canCVE-2025-8076 · Supermicro BMC web server request handling on MBD-X13SEDW-FHigh
- Supermicro BMC web interface (stack buffer overflow, X13SEDW-F): Second authenticated stack overflow in the BMC webCVE-2025-8727 · Supermicro BMC web interface (stack buffer overflow, X13SEDW-F)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.