Threats Tagged 'cve-2026-20901'

This security update addresses multiple vulnerabilities in Intel CPU microcode, including privilege escalation issues in Ring 0 and System Management Mode (SMM). The update includes microcode releases from Intel dated 2026-08-12, 2026-08-11, 2026-05-12, and 2026-02-27, covering a range of Intel processors such as Core Ultra and Xeon Scalable series. The update fixes functional issues and security vulnerabilities identified by Intel security advisories INTEL-SA-01379, INTEL-SA-01404, INTEL-SA-01420, INTEL-SA-01423, INTEL-SA-01428, INTEL-SA-01435, INTEL-SA-01441, INTEL-SA-01442, and INTEL-SA-01443. Red Hat has issued an important security advisory for microcode_ctl packages in Red Hat Enterprise Linux 8, providing updated microcode to mitigate these vulnerabilities.

This vulnerability involves improper input validation in the firmware of some Intel Xeon processors, potentially allowing escalation of privilege. The issue requires local access and a privileged user with high attack complexity. It does not impact confidentiality or availability but can affect system integrity. No user interaction is needed for exploitation. No patch information is currently available.

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.