CVE-2025-20109 — Improper Isolation or Compartmentalization in Intel-microcode

CWE-653 — Improper Isolation or Compartmentalization6 documents5 sources
Severity
7.3HIGHNVD
OSV7.0
EPSS
0.0%
top 96.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Debian Intel-microcode
Timeline
PublishedAug 12
Latest updateNov 10

Description

Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

▶debiandebian/intel-microcode< intel-microcode 3.20250812.1~deb12u1 (bookworm)

🔴Vulnerability Details

3
OSV
intel-microcode vulnerabilities↗2025-11-10
▶
GHSA
GHSA-3cpg-9r3v-qv5v: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially e↗2025-08-12
▶
OSV
CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially e↗2025-08-12
▶

📋Vendor Advisories

2
Ubuntu
Intel Microcode vulnerabilities↗2025-11-10
▶
Debian
CVE-2025-20109: intel-microcode - Improper Isolation or Compartmentalization in the stream cache mechanism for som...↗2025
▶