PT-2025-21102 · Intel+9 · Intel Core+9

Published 2025-05-12 · Updated 2025-11-26 · CVE-2025-20623

Positive Technologies (AI Summary)

CVSS v4.0

5.7

Medium

Base vector

AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: Intel(R) Core™ processors (10th Generation)

Description: The issue is caused by the exposure of sensitive information due to shared microarchitectural predictor state that influences transient execution. This may allow an authenticated user to potentially enable information disclosure via local access.

Recommendations: For Intel(R) Core™ processors (10th Generation), at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-1423

CWE-200

Related Identifiers

ALT-PU-2025-14707

BDU:2025-11966

CESA-2025_10991

CVE-2025-20623

DLA-4170-1

DSA-5924-1

INFBA-2025_9433

MGASA-2025-0160

OESA-2025-1528

OPENSUSE-SU-2025:15093-1

OPENSUSE-SU-2025_01651-1

RHSA-2025:10101

RHSA-2025:10102

RHSA-2025:10103

RHSA-2025:10107

RHSA-2025:10108

RHSA-2025:10109

RHSA-2025:10111

RHSA-2025:10126

RHSA-2025:10162

RHSA-2025:10991

RHSA-2025_10991

SUSE-SU-2025:01650-1

SUSE-SU-2025:01651-1

SUSE-SU-2025:01651-2

SUSE-SU-2025:1567-1

SUSE-SU-2025:20410-1

SUSE-SU-2025:20424-1

SUSE-SU-2025_01650-1

SUSE-SU-2025_01651-1

SUSE-SU-2025_01651-2

SUSE-SU-2025_1567-1

USN-7535-1

Affected Products

Alt Linux

Astra Linux

Centos

Debian

Intel Core

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 66

• https://osv.dev/vulnerability/SUSE-SU-2025:01650-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-24495 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-20054 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20410-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20012 · Security Note
• https://advisories.mageia.org/MGASA-2025-0160.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20424-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24495 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-20623 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01651-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-28956 · Security Note
• https://ubuntu.com/security/notices/USN-7535-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20103 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1567-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1528 · Vendor Advisory