Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Details
- CVSS 4.0 Base Score: 6.8 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade intel-ucode | Aug 8, 2025 | May 13, 2025 |
| Debian | — | Upgrade intel-microcode | May 15, 2025 | May 15, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 15, 2025 |
| Redhat_linux | — | Upgrade microcode_ctl-debuginfoUpgrade microcode_ctlNo solution exists | Jul 3, 2025 | May 13, 2025 |
| Rocky_linux | — | Upgrade microcode_ctl | Feb 5, 2026 | Jul 29, 2025 |
| Suse | — | Upgrade ucode-intelUpgrade microcode_ctl | Dec 5, 2025 | May 22, 2025 |
| Ubuntu | — | Upgrade intel-microcode (Ubuntu Pro)Upgrade intel-microcode | May 28, 2025 | May 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub