Read the docs
TI-2025-14326 Aliases CVE-2025-20012GHSA-2rmv-pmj6-727m

Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an…

Priority LOW 19CWE-696Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
High
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 14 fixed, 1 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.

Summary

Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00257 17th percentileScored 2026-11-07
Fix Partial Red Hat: 10 advisoriesRed Hat: 14 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Intel(R) Core™ Ultra ProcessorsSee references—No fix listedCNA
  • Intel(R) Core™ Ultra Processors Vendor— Affected See references Fixed in — No fix listed CNA

Remediation

Red Hat 10 advisories

  • RHSA-2025:10991 Released 2025-07-14 · Red Hat rating Moderate
    microcode_ctl security update
    • Red Hat Enterprise Linux BaseOS (v. 8) microcode_ctl-4:20250512-1.el8_10
  • RHSA-2025:10162 Released 2025-07-01 · Red Hat rating Moderate
    microcode_ctl security update
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) microcode_ctl-4:20220809-2.20250512.1.el8_8
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) microcode_ctl-4:20220809-2.20250512.1.el8_8
  • RHSA-2025:10109 Released 2025-07-01 · Red Hat rating Moderate
    microcode_ctl security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) microcode_ctl-4:20220207-1.20250512.1.el8_6
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) microcode_ctl-4:20220207-1.20250512.1.el8_6
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) microcode_ctl-4:20220207-1.20250512.1.el8_6
Show 7 more Red Hat advisories
  • RHSA-2025:10126 Released 2025-07-01 · Red Hat rating Moderate
    microcode_ctl security update
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) microcode_ctl-4:20191115-4.20250512.1.el8_2
  • RHSA-2025:10111 Released 2025-07-01 · Red Hat rating Moderate
    microcode_ctl security update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) microcode_ctl-2:2.1-53.26.el7_7.1
  • RHSA-2025:10108 Released 2025-07-01 · Red Hat rating Moderate
    microcode_ctl security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) microcode_ctl-2:2.1-73.24.el7_9
  • RHSA-2025:10107 Released 2025-07-01 · Red Hat rating Moderate
    microcode_ctl security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) microcode_ctl-4:20210216-1.20250512.1.el8_4
  • RHSA-2025:10101 Released 2025-07-01 · Red Hat rating Moderate
    microcode_ctl security update
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) microcode_ctl-4:20230808-2.20250512.1.el9_4
  • RHSA-2025:10102 Released 2025-07-01 · Red Hat rating Moderate
    microcode_ctl security update
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) microcode_ctl-4:20220809-2.20250512.1.el9_2
  • RHSA-2025:10103 Released 2025-07-01 · Red Hat rating Moderate
    microcode_ctl security update
    • Red Hat Enterprise Linux BaseOS E4S (v.9.0) microcode_ctl-4:20220207-1.20250512.1.el9_0

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix yet: Fix deferred
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2025:10991
Red Hat Enterprise Linux BaseOS (v. 9)Fixed—
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2025:10126
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2025:10107
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2025:10109
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2025:10109
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2025:10162
Red Hat Enterprise Linux BaseOS E4S (v.9.0)Fixed RHSA-2025:10103
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2025:10102
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2025:10101
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2025:10109
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2025:10162
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2025:10108
Red Hat Enterprise Linux Server AUS (v. 7.7)Fixed RHSA-2025:10111
Not affected: 1 product
  • Red Hat Enterprise Linux 10

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-20012
  2. 2026-10-03 Alias added: GHSA-2rmv-pmj6-727m

References

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences