Privilege Escalation Vulnerability in Intel Microcode Packages
Summary
UBUNTU-CVE-2025-22839: Insufficient granularity of access control in the OOB-MSM for some Intel(R) Xeon(R) 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access. Affects intel-microcode versions 1.20130906.1ubuntu2 – 3.20210608.0ubuntu0.14.04.1+esm1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Intel Microcode is a critical component that provides updates and fixes to Intel processors, enhancing their performance and security. It operates at a low level, directly interfacing with the CPU to ensure optimal functionality. The vulnerability identified in this report affects various versions of the Intel Microcode package across multiple Ubuntu LTS distributions, potentially allowing unauthorized privilege escalation.
Vulnerability Detail
The vulnerability arises from insufficient granularity of access control in the Out-Of-Band Management System (OOB-MSM) for specific Intel Xeon 6 Scalable processors. This flaw could allow a privileged user to exploit adjacent access, leading to potential escalation of privileges. The technical implications include unauthorized access to sensitive system resources, which could compromise system integrity and confidentiality.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected systems and monitor for any unauthorized access attempts while waiting for the patch to be applied. Additionally, consider implementing stricter access controls to mitigate the risk of privilege escalation.
Conclusion
In summary, the identified vulnerability in Intel Microcode packages poses a significant risk of privilege escalation due to insufficient access control. It is crucial for users to update their packages to the latest versions to mitigate this risk. Implementing additional security measures can further protect systems from potential exploitation.
See every vulnerability recorded for intel-microcode →
FAQ
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
Affected versions include those in Ubuntu LTS distributions from 14.04 to 25.04, specifically versions prior to the patched release 3.20250512.0ubuntu0.22.04.1.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If exploited, this vulnerability could allow unauthorized users to gain elevated privileges, potentially compromising sensitive data and system integrity.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for intel-microcode.
