CVE-2025-20047

Summary

Improper locking in the Intel(R) Integrated Connectivity I/O interface (CNVi) for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Affected Software

VendorProductVersion RangeStatus
n/aIntel(R) Core™ Ultra ProcessorsSee referencesaffected

Weaknesses

  • Escalation of Privilege
  • CWE-667: Improper Locking

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References