GCP-2025-044
Source GCP Compute Engine Security
Mentioned vulnerabilities
Rated Medium by Threat Radar's AI analysis
Data as of 26 Oct 2026, 22:14 UTC
What to do
AI-suggested
No customer action is required. Google will proactively update affected systems during standard and planned maintenance windows to address these vulnerabilities.
Description
Two new vulnerabilities affecting specific Intel processors have been identified. CVE-2025-21090 allows an unprivileged actor using the AMX and AVX CPU instructions to render the host machine inoperative. CVE-2025-22840 allows an unprivileged actor using the prefetchit CPU instruction to access memory contents without authorization, potentially leading to remote code execution. Google has stated no customer action is required as they will update systems during planned maintenance windows. No evidence of exploitation has been reported.