vulnerability
Amazon Linux 2023: CVE-2025-21090: Important priority package update for microcode_ctl
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:S/C:N/I:N/A:C) | Aug 12, 2025 | Sep 16, 2025 | Sep 16, 2025 |
Severity
5
CVSS
(AV:L/AC:L/Au:S/C:N/I:N/A:C)
Published
Aug 12, 2025
Added
Sep 16, 2025
Modified
Sep 16, 2025
Description
Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of service via local access.
Solution
amazon-linux-2023-upgrade-microcode-ctl
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.