Bug 2515299 - CVE-2025-35973 kata-containers: Intel Processors: Privilege escalation in Ring 0 via improper value handling [fedora-all]
Summary: CVE-2025-35973 kata-containers: Intel Processors: Privilege escalation in Rin...
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: kata-containers
Version: rawhide
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
Assignee: Christophe de Dinechin
QA Contact:
URL:
Whiteboard: {"flaws": ["d9d474ee-ba57-4ff4-84c8-c...
Depends On:
Blocks: CVE-2025-35973
TreeView+ depends on / blocked
 
Reported: 2026-08-13 13:16 UTC by jkelly
Modified: 2026-08-13 13:16 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)

Description jkelly 2026-08-13 13:16:51 UTC
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.


Note You need to log in before you can comment on or make changes to this bug.