CVE catalog

CVE-2025-20053

Intel Microcode vulnerabilities

[CVE catalog]

Severity
High · CVSS 7.2CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.15% · Oct 25, 2026

Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianintel-microcodesid3.20260227.1fixed
Debianintel-microcodeforky3.20260227.1fixed
Debianintel-microcodetrixie3.20251111.1~deb13u1fixed
Debianintel-microcodetrixie-security3.20250812.1~deb13u1fixed
Debianintel-microcodebookworm3.20251111.1~deb12u1fixed
Debianintel-microcodebookworm-security3.20250812.1~deb12u1fixed
Ubuntuintel-microcodenoble3.20250812.1~deb12u1fixed
Ubuntuintel-microcodenoble3.20250812.0ubuntu0.24.04.1fixed
Alpineintel-ucode3.1920250812-r0fixed
Alpineintel-ucode3.2020250812-r0fixed
Alpineintel-ucode3.2120250812-r0fixed
Alpineintel-ucode3.2220250812-r0fixed
Alpineintel-ucode3.2320250812-r0fixed
Alpineintel-ucode3.2420250812-r0fixed
Ubuntuintel-microcodepro3.20190918.1ubuntu1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu3vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.20.04.0vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcodepro3.20210216.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20210608.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20220510.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20220809.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20230214.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20230808.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20231114.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20240514.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20240813.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcodepro3.20240910.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20241112.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20250211.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20250512.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20250812.0ubuntu0.20.04.1+esm1fixed
Ubuntuintel-microcode22.043.20210608.2ubuntu1vulnerable
Ubuntuintel-microcode22.043.20220510.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20220809.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230214.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230808.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20231114.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240514.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240813.0ubuntu0.22.04.2vulnerable
Ubuntuintel-microcode22.043.20240910.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20241112.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20250211.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20250512.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20250812.0ubuntu0.22.04.1fixed
Ubuntuintel-microcode24.043.20230808.1vulnerable
Ubuntuintel-microcode24.043.20231114.0ubuntu1vulnerable
Ubuntuintel-microcode24.043.20231114.1vulnerable
Ubuntuintel-microcode24.043.20240312.1vulnerable
Ubuntuintel-microcode24.043.20240312.1build1vulnerable
Ubuntuintel-microcode24.043.20240514.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20240813.0ubuntu0.24.04.2vulnerable
Ubuntuintel-microcode24.043.20240910.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20241112.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20250211.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20250512.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20250812.0ubuntu0.24.04.1fixed
Ubuntuintel-microcode25.103.20250211.1ubuntu1vulnerable
Ubuntuintel-microcode25.103.20250512.1ubuntu1vulnerable
Ubuntuintel-microcode25.103.20250812.0ubuntu0.25.10.1fixed
Opensuseucode-inteltumbleweed20250812-1.1fixed
Suseucode-intellinux micro 6.020250812-1.1fixed
Suseucode-intellinux micro 6.120250812-slfo.1.1_1.1fixed
Susemicrocode_ctllinux enterprise server 11 sp4 ltss extreme core1.17-102.83.87.1fixed
Ubuntuintel-microcodepro3.20190918.1ubuntu1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu1vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu2vulnerable
Ubuntuintel-microcodepro3.20191115.1ubuntu3vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.20.04.0vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20200609.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20201110.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcodepro3.20210216.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20210608.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20220510.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20220809.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20230214.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20230808.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20231114.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20240514.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20240813.0ubuntu0.20.04.2vulnerable
Ubuntuintel-microcodepro3.20240910.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20241112.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20250211.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20250512.0ubuntu0.20.04.1vulnerable
Ubuntuintel-microcodepro3.20250812.0ubuntu0.20.04.1+esm1fixed
Ubuntuintel-microcode22.043.20210608.2ubuntu1vulnerable
Ubuntuintel-microcode22.043.20220510.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20220809.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230214.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20230808.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20231114.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240514.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20240813.0ubuntu0.22.04.2vulnerable
Ubuntuintel-microcode22.043.20240910.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20241112.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20250211.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20250512.0ubuntu0.22.04.1vulnerable
Ubuntuintel-microcode22.043.20250812.0ubuntu0.22.04.1fixed
Ubuntuintel-microcode24.043.20230808.1vulnerable
Ubuntuintel-microcode24.043.20231114.0ubuntu1vulnerable
Ubuntuintel-microcode24.043.20231114.1vulnerable
Ubuntuintel-microcode24.043.20240312.1vulnerable
Ubuntuintel-microcode24.043.20240312.1build1vulnerable
Ubuntuintel-microcode24.043.20240514.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20240813.0ubuntu0.24.04.2vulnerable
Ubuntuintel-microcode24.043.20240910.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20241112.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20250211.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20250512.0ubuntu0.24.04.1vulnerable
Ubuntuintel-microcode24.043.20250812.0ubuntu0.24.04.1fixed
Ubuntuintel-microcode25.103.20250211.1ubuntu1vulnerable
Ubuntuintel-microcode25.103.20250512.1ubuntu1vulnerable
Ubuntuintel-microcode25.103.20250812.0ubuntu0.25.10.1fixed
Suseucode-intellinux enterprise micro 5.320250812-150200.59.1fixed
Suseucode-intellinux enterprise micro 5.420250812-150200.59.1fixed
Suseucode-intellinux enterprise micro 5.520250812-150200.59.1fixed
Suseucode-intellinux enterprise module for basesystem 15 sp620250812-150200.59.1fixed
Suseucode-intellinux enterprise module for basesystem 15 sp720250812-150200.59.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp3-ltss20250812-150200.59.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp4-espos20250812-150200.59.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp4-ltss20250812-150200.59.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp5-espos20250812-150200.59.1fixed
Suseucode-intellinux enterprise high performance computing 15 sp5-ltss20250812-150200.59.1fixed
Suseucode-intellinux enterprise server 15 sp3-ltss20250812-150200.59.1fixed
Suseucode-intellinux enterprise server 15 sp4-ltss20250812-150200.59.1fixed
Suseucode-intellinux enterprise server 15 sp5-ltss20250812-150200.59.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp320250812-150200.59.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp420250812-150200.59.1fixed
Suseucode-intellinux enterprise server for sap applications 15 sp520250812-150200.59.1fixed
Suseucode-intelmanager proxy lts 4.320250812-150200.59.1fixed
Suseucode-intelmanager server lts 4.320250812-150200.59.1fixed
Suseucode-intellinux enterprise micro 5.120250812-150200.59.1fixed
Suseucode-intellinux enterprise micro 5.220250812-150200.59.1fixed
Suseucode-intelenterprise storage 7.120250812-150200.59.1fixed
Opensuseucode-intelleap 15.620250812-150200.59.1fixed
Suseucode-intellinux enterprise server 12 sp5-ltss20250812-155.1fixed
Suseucode-intellinux enterprise server ltss extended security 12 sp520250812-155.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianintel-microcodesourcesid3.20250812.1not yet assignedNot reported[1110983]
Debianintel-microcodesourceforky3.20250812.1not yet assignedNot reported[1110983]
Debianintel-microcodesourcetrixie3.20250812.1~deb13u1not yet assignedNot reported[1110983]
Debianintel-microcodesourcebookworm3.20250812.1~deb12u1not yet assignedNot reported[1110983]
Ubuntuintel-microcodedebnoble3.20250812.1~deb12u1Not reportedNot reportedNot reported
Ubuntuintel-microcodedebnoble3.20250812.0ubuntu0.24.04.1Not reportedNot reportedNot reported
Alpineintel-ucodeapk3.1920250812-r0Not reportedALPINE-CVE-2025-20053Not reported
Alpineintel-ucodeapk3.2020250812-r0Not reportedALPINE-CVE-2025-20053Not reported
Alpineintel-ucodeapk3.2120250812-r0Not reportedALPINE-CVE-2025-20053Not reported
Alpineintel-ucodeapk3.2220250812-r0Not reportedALPINE-CVE-2025-20053Not reported
Alpineintel-ucodeapk3.2320250812-r0Not reportedALPINE-CVE-2025-20053Not reported
Alpineintel-ucodeapk3.2420250812-r0Not reportedALPINE-CVE-2025-20053Not reported
Ubuntuintel-microcodedebpro3.20250812.0ubuntu0.20.04.1+esm1Not reportedUSN-7866-1Not reported
Ubuntuintel-microcodedeb22.043.20250812.0ubuntu0.22.04.1Not reportedUSN-7866-1Not reported
Ubuntuintel-microcodedeb24.043.20250812.0ubuntu0.24.04.1Not reportedUSN-7866-1Not reported
Ubuntuintel-microcodedeb25.103.20250812.0ubuntu0.25.10.1Not reportedUSN-7866-1Not reported
Opensuseucode-intelrpmtumbleweed20250812-1.1Not reportedOPENSUSE-SU-2025:15491-1Not reported
Suseucode-intelrpmlinux micro 6.020250812-1.1Not reportedSUSE-SU-2025:20715-1Not reported
Suseucode-intelrpmlinux micro 6.120250812-slfo.1.1_1.1Not reportedSUSE-SU-2025:20691-1Not reported
Susemicrocode_ctlrpmlinux enterprise server 11 sp4 ltss extreme core1.17-102.83.87.1Not reportedSUSE-SU-2025:03116-1Not reported
Ubuntuintel-microcodedebpro3.20250812.0ubuntu0.20.04.1+esm1Not reportedUBUNTU-CVE-2025-20053Not reported
Ubuntuintel-microcodedeb22.043.20250812.0ubuntu0.22.04.1Not reportedUBUNTU-CVE-2025-20053Not reported
Ubuntuintel-microcodedeb24.043.20250812.0ubuntu0.24.04.1Not reportedUBUNTU-CVE-2025-20053Not reported
Ubuntuintel-microcodedeb25.103.20250812.0ubuntu0.25.10.1Not reportedUBUNTU-CVE-2025-20053Not reported
Suseucode-intelrpmlinux enterprise micro 5.320250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.420250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.520250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise module for basesystem 15 sp620250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise module for basesystem 15 sp720250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp3-ltss20250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp4-espos20250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp4-ltss20250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp5-espos20250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise high performance computing 15 sp5-ltss20250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp3-ltss20250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp4-ltss20250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise server 15 sp5-ltss20250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp320250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp420250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise server for sap applications 15 sp520250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmmanager proxy lts 4.320250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmmanager server lts 4.320250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.120250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise micro 5.220250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmenterprise storage 7.120250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Opensuseucode-intelrpmleap 15.620250812-150200.59.1Not reportedSUSE-SU-2025:03053-1Not reported
Suseucode-intelrpmlinux enterprise server 12 sp5-ltss20250812-155.1Not reportedSUSE-SU-2025:03052-1Not reported
Suseucode-intelrpmlinux enterprise server ltss extended security 12 sp520250812-155.1Not reportedSUSE-SU-2025:03052-1Not reported

[Debian bug #1110983]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Details (1)
    • 3.20251111.1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.20250812.1~deb12u1

      usn · intel-microcode · debian · bookworm; usn · intel-microcode · debian · 12

[Debian 13 (Trixie)]

  • Details (1)
    • 3.20251111.1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.20250812.1~deb13u1

      usn · intel-microcode · debian · 13

[openSUSE Tumbleweed]

  • Source package: [ucode-intel]

    Details (1)
    • 20260812-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 20250812-1.1

      usn · ucode-intel · opensuse · tumbleweed

Observed:

References