Privilege Escalation Risk in Intel Microcode Package: ALPINE-CVE-2025-22839
Summary
ALPINE-CVE-2025-22839: Insufficient granularity of access control in the OOB-MSM for some Intel(R) Xeon(R) 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access. Affects intel-ucode versions < 20250812-r0. Fixed in 20250812-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 'intel-ucode' package in Alpine Linux provides microcode updates for Intel processors, enhancing system stability and performance. It is crucial for maintaining the security and efficiency of systems running Intel hardware. However, certain versions of this package are vulnerable to a privilege escalation issue, which could allow unauthorized access to sensitive system functions.
Vulnerability Detail
The vulnerability identified as ALPINE-CVE-2025-22839 arises from insufficient granularity of access control in the Out-Of-Band Management System (OOB-MSM) for specific Intel Xeon 6 Scalable processors. This flaw could enable a privileged user to escalate their privileges through adjacent access, potentially compromising system integrity and security. The issue is particularly concerning as it affects multiple versions of the intel-ucode package across various Alpine Linux releases.
How To Fix
Minimum fixed version
20250812-r0
This is the first release that contains the fix.
sudo apk add --upgrade intel-ucodeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch as soon as possible to ensure system security.
Conclusion
The ALPINE-CVE-2025-22839 vulnerability poses a significant risk to systems using the intel-ucode package in certain Alpine Linux versions. It is crucial to apply the necessary updates to safeguard against potential privilege escalation attacks. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for intel-ucode →
FAQ
ALPINE-CVE-2025-22839 is a vulnerability in the intel-ucode package that allows for potential privilege escalation due to insufficient access control.
The vulnerability affects intel-ucode versions in Alpine Linux v3.19, v3.20, v3.21, and v3.22.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities. By uploading your manifest file, you can check if your application is affected by this vulnerability.
While there are no specific workarounds, it is recommended to limit access to the affected systems until the patch can be applied.
Detailed information about ALPINE-CVE-2025-22839 can be found in the official Alpine Linux security advisories and the CVE database.
References
Related vulnerabilities
Recent vulnerabilities recorded for intel-ucode.
