CVE-2025-21090 — Missing Reference to Active Allocated Resource in Intel-microcode

CWE-771 — Missing Reference to Active Allocated Resource6 documents5 sources
Severity
4.1MEDIUMNVD
OSV7.0
EPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Debian Intel-microcode
Timeline
PublishedAug 12
Latest updateNov 10

Description

Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of service via local access.

CVSS vector

CVSS:4.0/AV:P/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

▶debiandebian/intel-microcode< intel-microcode 3.20250812.1~deb12u1 (bookworm)

🔴Vulnerability Details

3
OSV
intel-microcode vulnerabilities↗2025-11-10
▶
GHSA
GHSA-x546-m2vh-46gq: Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of se↗2025-08-12
▶
OSV
CVE-2025-21090: Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of se↗2025-08-12
▶

📋Vendor Advisories

2
Ubuntu
Intel Microcode vulnerabilities↗2025-11-10
▶
Debian
CVE-2025-21090: intel-microcode - Missing reference to active allocated resource for some Intel(R) Xeon(R) process...↗2025
▶