x86-64.net

Processor errata

Intel processor errata

Intel's CVEs for processor bugs that are not side channels: hangs, state machine and microcode flaws, accelerator and virtualization issues, from 2021 on.

Kind
Other
CVEs
22
Published
2022–2026
Intel publishes these processor bugs as security advisories with a CVE when they let software cross a boundary: an unprivileged user or a guest that hangs the machine, or privileged code that gains more. Each advisory below lists its CVEs; those whose sources give a mechanism have pages of their own.

CVEs

CVENameVendorsPublished
CVE-2021-0127Breakpoint control flow (described below)Intel2022-02-09
CVE-2022-21180Undefined MMIO HangIntel2022-06-15
CVE-2022-33972Microcode keying calculation (described below)Intel2023-02-16
CVE-2023-39368Bus lock regulator (described below)Intel2024-03-14
CVE-2023-45733Hardware logic race (described below)Intel2024-05-16
CVE-2023-46103Instruction sequence: Core Ultra (described below)Intel2024-05-16
CVE-2024-21823DSA and IAA error reportingIntel2024-05-16
CVE-2024-21853Hardware logic state machines: Xeon (described below)Intel2024-11-13
CVE-2024-24968Hardware logic state machines (described below)Intel2024-09-16
CVE-2024-25939Mirrored memory regions (described below)Intel2024-08-14
CVE-2024-31068Machine check error avoidance derivative (described below)Intel2025-02-12
CVE-2024-36242Sub-page permissionIntel2024-11-13
CVE-2024-37020DSA instruction sequence (described below)Intel2025-02-12
CVE-2024-38660Sub-page permission: E-cores (described below)Intel2024-11-13
CVE-2024-39355Physical or environmental conditions: 13th and 14th generation Core (described below)Intel2025-02-12
CVE-2025-20012Incorrect behavior order: Core Ultra (described below)Intel2025-05-13
CVE-2025-20054Core management exception (described below)Intel2025-05-13
CVE-2025-20103Core management resource pool (described below)Intel2025-05-13
CVE-2025-22840Instruction sequence: Xeon 6 (described below)Intel2025-08-12
CVE-2025-31648Microcode flow value handling (described below)Intel2026-02-10
CVE-2025-35973Ring 0 value handling (described below)Intel2026-08-11
CVE-2026-20760Overlapping protected memory ranges (described below)Intel2026-08-11

CVEs without a page of their own

The sources give these CVEs too few facts of their own (affected processors, a mitigation, a check) for a page; this is what they say.

CVE-2021-0127: Breakpoint control flow

Insufficient control flow management around breakpoints lets a local user hang Skylake to Comet Lake era processors; fixed in firmware in 2022. INTEL-SA-00532. Source. CVE record (2022-02-09).

CVE-2022-33972: Microcode keying calculation

An incorrect calculation in the microcode keying mechanism of 3rd generation Xeon Scalable can disclose information to a privileged user. INTEL-SA-00730. Source. CVE record (2023-02-16).

CVE-2023-39368: Bus lock regulator

A protection failure of the bus lock regulator of some Intel processors lets a remote attacker cause a denial of service; fixed in microcode. INTEL-SA-00972. Source. Source. CVE record (2024-03-14).

CVE-2023-45733: Hardware logic race

Race conditions in the hardware logic of Alder Lake, Raptor Lake and Meteor Lake can disclose a little information to a local user; fixed in microcode. INTEL-SA-01051. Source. CVE record (2024-05-16).

CVE-2023-46103: Instruction sequence: Core Ultra

A sequence of instructions makes Meteor Lake behave unexpectedly, letting a local user cause a denial of service; fixed in microcode. INTEL-SA-01052. Source. CVE record (2024-05-16).

CVE-2024-21853: Hardware logic state machines: Xeon

Improper finite state machines in 4th and 5th generation Xeon Scalable let a local user cause a denial of service; fixed in firmware. INTEL-SA-01101. Source. CVE record (2024-11-13).

CVE-2024-24968: Hardware logic state machines

Improper finite state machines in the hardware logic of Ice Lake to Raptor Lake and Xeon Scalable processors let a privileged user cause a denial of service. INTEL-SA-01097. Source. CVE record (2024-09-16).

CVE-2024-25939: Mirrored memory regions

Mirrored memory regions holding different values let a privileged user cause a denial of service on Cooper Lake Xeon Scalable; fixed in microcode. INTEL-SA-01118. Source. Source. CVE record (2024-08-14).

CVE-2024-31068: Machine check error avoidance derivative

Improper state machines in the hardware logic of Alder Lake to Emerald Rapids let a privileged user cause a denial of service; fixed in microcode. INTEL-SA-01166. Source. Source. CVE record (2025-02-12).

CVE-2024-37020: DSA instruction sequence

A sequence of instructions makes the Data Streaming Accelerator 1.0 behave unexpectedly, letting a local user cause a denial of service; fixed in DSA software. INTEL-SA-01194. Source. CVE record (2025-02-12).

CVE-2024-38660: Sub-page permission: E-cores

The E-core form of the SPP issue: only the 4 KiB regions where the hypervisor uses SPP are affected; Intel advises dropping SPP. INTEL-SA-01196. Source. CVE record (2024-11-13).

CVE-2024-39355: Physical or environmental conditions: 13th and 14th generation Core

Improper handling of physical or environmental conditions in 13th and 14th generation Core desktop processors allows a denial of service. INTEL-SA-01228. Source. CVE record (2025-02-12).

CVE-2025-20012: Incorrect behavior order: Core Ultra

Incorrect behaviour order in Arrow Lake and Lunar Lake lets someone with physical access disclose information; fixed in microcode in May 2025. INTEL-SA-01322. Source. CVE record (2025-05-13).

CVE-2025-20054: Core management exception

An uncaught exception in the core management of Alder Lake to Arrow Lake and Xeon Scalable processors lets a local user cause a denial of service. INTEL-SA-01244. Source. CVE record (2025-05-13).

CVE-2025-20103: Core management resource pool

An insufficient resource pool in the core management of 5th generation Xeon Scalable lets a local user cause a denial of service; fixed in microcode. INTEL-SA-01244. Source. CVE record (2025-05-13).

CVE-2025-22840: Instruction sequence: Xeon 6

A sequence of instructions makes Xeon 6 with P-cores behave unexpectedly, letting a local user escalate privilege; fixed in microcode. INTEL-SA-01308. Source. CVE record (2025-08-12).

CVE-2025-31648: Microcode flow value handling

Improper handling of values in a microcode flow lets an attacker with startup code or SMM access escalate privilege, from Ice Lake to Xeon 6. INTEL-SA-01396. Source. CVE record (2026-02-10).

CVE-2025-35973: Ring 0 value handling

Improper handling of values in Core Ultra and Xeon 6 processors lets privileged kernel or hypervisor code escalate privilege; fixed in microcode. INTEL-SA-01428. Source. CVE record (2026-08-11).

CVE-2026-20760: Overlapping protected memory ranges

Microcode of Lunar Lake, Arrow Lake and Panther Lake mishandles overlapping protected memory ranges, letting a hypervisor escalate privilege. INTEL-SA-01441. Source. CVE record (2026-08-11).

Advisories

INTEL-SA-00532: 2021.2 IPU - Intel Processor Breakpoint Control Flow Advisory

CVE-2021-0127

INTEL-SA-00645: Intel Processors MMIO Undefined Access Advisory

CVE-2022-21180

INTEL-SA-00730: 3rd Generation Intel Xeon Scalable Processors Advisory

CVE-2022-33972

INTEL-SA-00972: 2024.1 IPU - Intel Processor Bus Lock Advisory

CVE-2023-39368

INTEL-SA-01051: 2024.2 IPU - Intel Processor Advisory

CVE-2023-45733

INTEL-SA-01052: Intel Core Ultra Processor Advisory

CVE-2023-46103

INTEL-SA-01084: Intel DSA and Intel IAA Advisory

CVE-2024-21823

INTEL-SA-01097: 2024.3 IPU - Intel Processor Advisory

CVE-2024-24968

INTEL-SA-01101: Intel Xeon Processor Advisory

CVE-2024-21853

INTEL-SA-01118: 3rd Generation Intel Xeon Scalable Processor Advisory

CVE-2024-25939

INTEL-SA-01166: 2024.4 IPU, Intel Processor Advisory

CVE-2024-31068

INTEL-SA-01194: Intel Data Streaming Accelerator Advisory

CVE-2024-37020

INTEL-SA-01196: Intel Processor (SPP) Advisory

CVE-2024-36242, CVE-2024-38660

INTEL-SA-01228: 2025.1 IPU - 13th and 14th Generation Intel Core Processor Advisory

CVE-2024-39355

INTEL-SA-01244: 2025.2 IPU - Intel Processor Advisory

CVE-2025-20054, CVE-2025-20103

INTEL-SA-01308: Intel Xeon 6 Scalable Processors Advisory

CVE-2025-22840

INTEL-SA-01322: Intel Core Ultra Processor Firmware Advisory

CVE-2025-20012

INTEL-SA-01396: 2026.1 IPU, Intel Processor Firmware Advisory

CVE-2025-31648

INTEL-SA-01428: Intel Processor Firmware Advisory - 01428

CVE-2025-35973

INTEL-SA-01441: 2026.3 IPU, Intel Processor Firmware Advisory

CVE-2026-20760

Sources

  1. INTEL-SA-00532: 2021.2 IPU - Intel Processor Breakpoint Control Flow Advisory
  2. INTEL-SA-00645: Intel Processors MMIO Undefined Access Advisory
  3. INTEL-SA-00730: 3rd Generation Intel Xeon Scalable Processors Advisory
  4. INTEL-SA-00972: 2024.1 IPU - Intel Processor Bus Lock Advisory
  5. INTEL-SA-01051: 2024.2 IPU - Intel Processor Advisory
  6. INTEL-SA-01052: Intel Core Ultra Processor Advisory
  7. INTEL-SA-01084: Intel DSA and Intel IAA Advisory
  8. INTEL-SA-01097: 2024.3 IPU - Intel Processor Advisory
  9. INTEL-SA-01101: Intel Xeon Processor Advisory
  10. INTEL-SA-01118: 3rd Generation Intel Xeon Scalable Processor Advisory
  11. INTEL-SA-01166: 2024.4 IPU, Intel Processor Advisory
  12. INTEL-SA-01194: Intel Data Streaming Accelerator Advisory
  13. INTEL-SA-01196: Intel Processor (SPP) Advisory
  14. INTEL-SA-01228: 2025.1 IPU - 13th and 14th Generation Intel Core Processor Advisory
  15. INTEL-SA-01244: 2025.2 IPU - Intel Processor Advisory
  16. INTEL-SA-01308: Intel Xeon 6 Scalable Processors Advisory
  17. INTEL-SA-01322: Intel Core Ultra Processor Firmware Advisory
  18. INTEL-SA-01396: 2026.1 IPU, Intel Processor Firmware Advisory
  19. INTEL-SA-01428: Intel Processor Firmware Advisory - 01428
  20. INTEL-SA-01441: 2026.3 IPU, Intel Processor Firmware Advisory