Rapid7

vulnerability

Amazon Linux 2023: CVE-2025-20054: Important priority package update for microcode_ctl (Multiple Advisories)

Severity
5
CVSS
(AV:L/AC:L/Au:S/C:N/I:N/A:C)
Published
May 13, 2025
Added
Jun 3, 2025
Modified
Sep 30, 2025

Description

Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.

Solution

amazon-linux-2023-upgrade-microcode-ctl
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.