CVE-2025-20012: Medium severity Intel Core Ultra Processors vulnerability
Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20251111.1~deb12u1Fixed in 3.20250812.1~deb12u1Fixed in 3.20251111.1~deb13u1Fixed in 3.20250812.1~deb13u1Fixed in 3.20260227.1
Event History
Frequently Asked Questions
What types of systems are affected by CVE-2025-20012?
CVE-2025-20012 affects some Intel(R) Core™ Ultra Processors.
What is the potential impact of CVE-2025-20012?
CVE-2025-20012 may allow an unauthenticated user to enable information disclosure via physical access.
What is the nature of the vulnerability CVE-2025-20012?
CVE-2025-20012 is characterized by an incorrect behavior order in affected Intel processors.
Is remote access required to exploit CVE-2025-20012?
No, CVE-2025-20012 can be exploited with physical access, and does not require remote access.
Are there any known mitigations for CVE-2025-20012?
Specific mitigations for CVE-2025-20012 are not detailed, so it is recommended to follow manufacturer guidance for securing affected systems.