Sensitive Information Exposure in Intel Microcode - CVE-2025-20623
Summary
CVE-2025-20623: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core™ processors (10th Generation) may allow an authenticated user to potentiall... Affects intel-ucode versions < 20250512-r0. Fixed in 20250512-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Intel Microcode is a critical component of Intel processors that provides low-level control over the CPU's operations. It is responsible for implementing fixes and enhancements to the processor's functionality. The microcode is updated to address security vulnerabilities and improve performance. However, certain versions of Intel Microcode, particularly those affecting 10th Generation Intel Core processors, are susceptible to a vulnerability that can lead to the exposure of sensitive information.
Vulnerability Detail
CVE-2025-20623 is a vulnerability that arises from the exposure of sensitive information due to shared microarchitectural predictor state. This state can influence transient execution, potentially allowing an authenticated user with local access to disclose sensitive information. The vulnerability primarily affects specific Intel Core processors from the 10th generation, which may lead to unauthorized access to confidential data.
How To Fix
Minimum fixed version
20250512-r0
This is the first release that contains the fix.
sudo apk add --upgrade intel-ucodeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit local access to systems running affected Intel processors, thereby reducing the risk of information disclosure until a patch is applied.
Conclusion
CVE-2025-20623 highlights a significant vulnerability in Intel Microcode affecting 10th Generation Intel Core processors, which can lead to sensitive information exposure. Users are advised to update their microcode packages promptly and consider temporary workarounds to mitigate risks.
See every vulnerability recorded for intel-ucode →
FAQ
CVE-2025-20623 is a vulnerability in Intel Microcode that can lead to the exposure of sensitive information due to shared microarchitectural predictor state.
The vulnerability primarily affects 10th Generation Intel Core processors.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, limit local access to the affected systems as a temporary workaround.
Detailed information can be found in the official CVE database and through security advisories related to Intel Microcode.
Related vulnerabilities
Recent vulnerabilities recorded for intel-ucode.
