Improper isolation or compartmentalization in Intel products - CVE-2025-20109

Vulnerability identifier: #VU124000

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-20109

CWE-ID: CWE-653

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper isolation in the stream cache mechanism. A local user can execute arbitrary code with elevated privileges. 

12th Generation Intel Core Processors
Intel Pentium Gold Processor Series
Intel Celeron Processors
13th Generation Intel Core Processors
14th Generation Intel Core Processors
Intel Core i9
Intel Xeon E Processors
Intel Core Ultra processor
13th Generation Intel Core i7 processors
F5OS-A
F5OS-C

Install updates from vendor's website.

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01249.html

• Privilege escalation in Intel Processor stream cache mechanisms
• Privilege escalation in F5OS Intel CPU