VDB
ALPINE-CVE-2025-21090
ALPINE-CVE-2025-21090
PUBLISHED
CVSS 4.099999904632568 MEDIUM
Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of service via local access.
Risk Scores
CVSS v4.0
4.099999904632568
CVSS:4.0/AV:P/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.22 | intel-ucode | 0, 20250512-r0, 20250211-r0 |
| Alpine:v3.21 | intel-ucode | 0, 20130222-r0, 20170511-r0 |
| Alpine:v3.19 | intel-ucode | 20250512-r0, 20200520-r0, 0 |
| Alpine:v3.20 | intel-ucode | 20220809-r0, 0, 20130222-r0 |
| Alpine:v3.23 | intel-ucode | 20180807a-r1, 20180807a-r0, 20180312-r0 |
Timeline
- Aug 12, 2025 CVE Published
- Dec 3, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch