Improper Locking Vulnerability in Intel Core Ultra Processors

CVE-2025-20047

What is CVE-2025-20047?

The vulnerability pertains to improper locking within the Intel Integrated Connectivity I/O interface (CNVi) found in certain Intel Core Ultra Processors. This issue may allow unauthorized access, enabling an unauthenticated user with physical access to escalate privileges. This poses significant security concerns, especially in environments where physical security cannot be guaranteed. The potential exploitation of this flaw underscores the importance of safeguarding hardware against unauthorized access.

References