Critical Denial of Service Vulnerability in Intel Microcode Package
Summary
UBUNTU-CVE-2025-20054: Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access. Affects intel-microcode versions 1.20130906.1ubuntu2 – 3.20210608.0ubuntu0.14.04.1+esm1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Intel Microcode package is essential for managing the low-level operations of Intel processors, ensuring optimal performance and security. It provides updates to the processor's firmware, addressing bugs and vulnerabilities. This package is crucial for maintaining system stability and security, particularly in environments that rely on Intel hardware. However, it has been identified as vulnerable to a specific issue that could allow unauthorized access and potential denial of service.
Vulnerability Detail
The vulnerability, identified as CVE-2025-20054, originates from an uncaught exception in the core management mechanism for certain Intel processors. This flaw allows an authenticated user to potentially exploit the system, leading to a denial of service via local access. The implications of this vulnerability are significant, as it could disrupt system operations and compromise the integrity of services relying on affected Intel processors.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specified workarounds for this vulnerability. The best course of action is to apply the available updates as soon as they are released.
Conclusion
The Intel Microcode package has a critical vulnerability (CVE-2025-20054) that could allow denial of service through local access. It is essential for users to update their systems to the patched version to ensure security and stability. Regular monitoring and updates are crucial for maintaining the integrity of systems relying on Intel processors.
See every vulnerability recorded for intel-microcode →
FAQ
CVE-2025-20054 is a vulnerability in the Intel Microcode package that allows an authenticated user to potentially enable denial of service via local access.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected by this vulnerability.
The vulnerability could lead to a denial of service, disrupting system operations and affecting services that rely on the affected Intel processors.
Yes, a patch is available. Users should update to the latest version of the Intel Microcode package to mitigate the vulnerability.
The CVSS score of CVE-2025-20054 is 6.5, indicating a medium severity level.
Related vulnerabilities
Recent vulnerabilities recorded for intel-microcode.
