VDB
ALPINE-CVE-2025-21090
ALPINE-CVE-2025-21090
PUBLISHED
CVSS 4.099999904632568 MEDIUM
Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of service via local access.
Risk Scores
CVSS 4.0
4.099999904632568
CVSS:4.0/AV:P/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.22 | intel-ucode | 0, 20191113-r0, * |
| Alpine:v3.21 | intel-ucode | 20240312-r0, 0, 20130222-r0 |
| Alpine:v3.19 | intel-ucode | 20200520-r0, 0, 20130222-r0 |
| Alpine:v3.20 | intel-ucode | *, 0, 20130222-r0 |
| Alpine:v3.23 | intel-ucode | 20180108-r0, 20130222-r0, 0 |
| Alpine:v3.24 | intel-ucode | 0 |
Timeline
- Aug 12, 2025 CVE Published
- Apr 30, 2026 Distribution Patch
- Jun 15, 2026 CVE Updated