CVE Vulnerabilities

CVE-2025-24305

Insufficient Control Flow Management

Published: Aug 12, 2025 | Modified: Aug 13, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.

Weakness

The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

Affected Software

Name Vendor Start Version End Version
Intel-microcode Ubuntu devel *
Intel-microcode Ubuntu esm-infra-legacy/trusty *
Intel-microcode Ubuntu esm-infra/bionic *
Intel-microcode Ubuntu esm-infra/focal *
Intel-microcode Ubuntu esm-infra/xenial *
Intel-microcode Ubuntu jammy *
Intel-microcode Ubuntu noble *
Intel-microcode Ubuntu plucky *
Intel-microcode Ubuntu questing *
Intel-microcode Ubuntu upstream *

References