microcode_ctl: Insufficient resource pool in the core management mechanism
Published May 13, 2025
5.7
MEDIUMCVSS 4.0
EPSS 0.17%
Description
Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.
Affected products
- Vendor n/a Product Intel(R) Processors Defaultunaffected
Affected
- See references
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| n/a | Intel(R) Processors | unaffected | Affected
|
No data.
No data.
Red Hat Enterprise Linux 10
microcode_ctl
Fix deferred
Red Hat Enterprise Linux 6
microcode_ctl
Fix deferred
Red Hat Enterprise Linux 7
microcode_ctl
Fix deferred
Red Hat Enterprise Linux 8
microcode_ctl
Fix deferred
Red Hat Enterprise Linux 9
microcode_ctl
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | microcode_ctl | Fix deferred | n/a |
| Red Hat Enterprise Linux 6 | microcode_ctl | Fix deferred | n/a |
| Red Hat Enterprise Linux 7 | microcode_ctl | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | microcode_ctl | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | microcode_ctl | Fix deferred | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (7)
- https://access.redhat.com/security/cve/CVE-2025-20103 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366091 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14566 Advisory
- https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html
- https://nvd.nist.gov/vuln/detail/CVE-2025-20103
- https://www.cve.org/CVERecord?id=CVE-2025-20103
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub
No data