Vulnerability
Stream Cache Isolation
Improper isolation in the stream cache mechanism of recent Intel processors, which can let an authenticated local user escalate privileges.
- Kind
- Other
- CVEs
- 3
- Published
- 2024–2025
CVEs
| CVE | Name | Vendors | Published |
|---|---|---|---|
| CVE-2023-42667 | Stream cache isolation: Meteor Lake (described below) | Intel | 2024-08-14 |
| CVE-2023-49141 | Stream cache isolation (described below) | Intel | 2024-08-14 |
| CVE-2025-20109 | Stream cache isolation (2025) (described below) | Intel | 2025-08-12 |
CVEs without a page of their own
The sources give these CVEs too few facts of their own (affected processors, a mitigation, a check) for a page; this is what they say.
CVE-2023-42667: Stream cache isolation: Meteor Lake
Improper isolation in the stream cache mechanism of Meteor Lake allows privilege escalation; microcode 0x17 fixes it. INTEL-SA-01038. Source. CVE record (2024-08-14).
CVE-2023-49141: Stream cache isolation
Improper isolation in the stream cache mechanism of Alder Lake, Raptor Lake and Sapphire Rapids allows privilege escalation; fixed in microcode. INTEL-SA-01046. Source. CVE record (2024-08-14).
CVE-2025-20109: Stream cache isolation (2025)
A further isolation flaw of the stream cache, from Alder Lake to Emerald Rapids, allowing privilege escalation; fixed in firmware in August 2025. INTEL-SA-01249. Source. CVE record (2025-08-12).