CVE-2025-24495: Race Condition
Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20251111.1~deb12u1Fixed in 3.20250812.1~deb12u1Fixed in 3.20251111.1~deb13u1Fixed in 3.20250812.1~deb13u1Fixed in 3.20260227.1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-24495?
CVE-2025-24495 is considered a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2025-24495?
To mitigate CVE-2025-24495, users should apply the latest firmware updates provided by Intel for their Core Ultra Processors.
Who is affected by CVE-2025-24495?
CVE-2025-24495 affects users of Intel Core Ultra Processors specifically.
Can CVE-2025-24495 be exploited remotely?
CVE-2025-24495 cannot be exploited remotely as it requires local access to the affected system.
What type of information disclosure is possible with CVE-2025-24495?
CVE-2025-24495 may allow an authenticated user to gain unauthorized access to sensitive information stored in the system.