Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of… (CVE-2026-20898)

CVE-2026-20898 describes an improper access control vulnerability in the firmware of the Alias Checking Trusted Module on certain Intel Xeon processors. A local attacker with high privileges and specialized internal knowledge could exploit this flaw to escalate privileges, impacting confidentiality and integrity of the system. The attack complexity is high, requiring privileged user access and no user interaction. There is no indication of availability impact. No known exploits are reported in the wild, and no patch or remediation information is currently provided.

Successful exploitation could lead to escalation of privilege, compromising system confidentiality and integrity. Availability is not impacted. The attack requires local privileged access and high complexity, limiting the likelihood of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is currently available. Due to the complexity and required privileges, monitoring for updates from Intel and applying any future firmware updates is recommended.