Escalation of Privilege in Intel(R) Platforms (CVE-2025-35998)
CVE-2025-35998 is a high-severity escalation of privilege vulnerability affecting Intel(R) Platforms using Intel(R) Quick Assist Technology. The vulnerability arises from a missing protection mechanism in the hardware interface at the kernel level (Ring 0), potentially allowing a privileged local user to escalate privileges with low complexity and no user interaction. The vulnerability impacts confidentiality and integrity of the affected system. Red Hat has issued a security advisory providing a microcode update to address this issue for Red Hat Enterprise Linux 10.0. No known exploits are reported in the wild.
AI Analysis
Technical Summary
This vulnerability involves a missing protection mechanism in the alternate hardware interface of Intel(R) Quick Assist Technology on some Intel(R) Platforms within Ring 0 (kernel mode). A system software adversary with privileged user access can exploit this flaw via local access to escalate privileges, potentially compromising system confidentiality and integrity. The attack requires special internal knowledge but no user interaction and is of low complexity. Red Hat has released a microcode update (microcode_ctl) for Red Hat Enterprise Linux 10.0 Extended Update Support to mitigate this vulnerability.
Potential Impact
Successful exploitation may allow a privileged local user to escalate their privileges, leading to a high impact on system confidentiality and integrity. Availability is not affected. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released an official security update for the microcode_ctl package addressing CVE-2025-35998. Users of Red Hat Enterprise Linux 10.0 should apply the microcode_ctl update version 20260227 or later as detailed in Red Hat advisory RHSA-2026:6888. Patch status is confirmed as an official fix available from the vendor. No additional mitigation actions are indicated by the vendor advisory.
Escalation of Privilege in Intel(R) Platforms (CVE-2025-35998)
Description
CVE-2025-35998 is a high-severity escalation of privilege vulnerability affecting Intel(R) Platforms using Intel(R) Quick Assist Technology. The vulnerability arises from a missing protection mechanism in the hardware interface at the kernel level (Ring 0), potentially allowing a privileged local user to escalate privileges with low complexity and no user interaction. The vulnerability impacts confidentiality and integrity of the affected system. Red Hat has issued a security advisory providing a microcode update to address this issue for Red Hat Enterprise Linux 10.0. No known exploits are reported in the wild.
CVSS v4.0
Score 7.0high
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves a missing protection mechanism in the alternate hardware interface of Intel(R) Quick Assist Technology on some Intel(R) Platforms within Ring 0 (kernel mode). A system software adversary with privileged user access can exploit this flaw via local access to escalate privileges, potentially compromising system confidentiality and integrity. The attack requires special internal knowledge but no user interaction and is of low complexity. Red Hat has released a microcode update (microcode_ctl) for Red Hat Enterprise Linux 10.0 Extended Update Support to mitigate this vulnerability.
Potential Impact
Successful exploitation may allow a privileged local user to escalate their privileges, leading to a high impact on system confidentiality and integrity. Availability is not affected. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released an official security update for the microcode_ctl package addressing CVE-2025-35998. Users of Red Hat Enterprise Linux 10.0 should apply the microcode_ctl update version 20260227 or later as detailed in Red Hat advisory RHSA-2026:6888. Patch status is confirmed as an official fix available from the vendor. No additional mitigation actions are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:6888
- Cve Count
- 1
- State
- PUBLISHED
Threat ID: 6a4049d727e9c7971982e414
Added to database: 06/27/2026, 22:08:23 UTC
Last enriched: 07/15/2026, 16:18:41 UTC
Last updated: 09/10/2026, 22:11:52 UTC
Views: 34
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.