CVE-2025-20103: Medium severity Intel Processors vulnerability

Published May 13, 2025

Updated

Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.

Affected Software

2 affected componentsFixes available

Intel Processors

debian/intel-microcode

3.20251111.1~deb12u13.20250812.1~deb12u13.20251111.1~deb13u13.20250812.1~deb13u13.20260227.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/intel-microcode to a version that resolves this vulnerability.
Fixed in 3.20251111.1~deb12u1Fixed in 3.20250812.1~deb12u1Fixed in 3.20251111.1~deb13u1Fixed in 3.20250812.1~deb13u1Fixed in 3.20260227.1

Event History

May 13, 2025

CVE Published

via MITRE·09:02 PM

Data Sourced

via MITRE·09:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:16 PM

DescriptionSeverityWeakness

Event

via NVD·09:16 PM

Parent advisories

This vulnerability appears in the following advisories.

DSA-5924

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-4170-1

Frequently Asked Questions

What is the severity of CVE-2025-20103?

CVE-2025-20103 has a severity rating that indicates a potential denial of service vulnerability affecting some Intel processors.

How do I fix CVE-2025-20103?

To address CVE-2025-20103, users should apply the latest firmware updates provided by Intel for affected processors.

Who is affected by CVE-2025-20103?

CVE-2025-20103 affects authenticated users with access to certain configurations on specific Intel processors.

What type of vulnerability is CVE-2025-20103?

CVE-2025-20103 is categorized as a denial of service vulnerability due to insufficient resource pool management.

Can CVE-2025-20103 be exploited remotely?

No, CVE-2025-20103 requires local access to the system to be exploited.