HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2026-20898

CVSS 8.5v4.0pub. 2026-08-11upd. 2026-08-31

Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.

CVSS Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • Intel Xeon 6315p

    HW
    Intel
    all versions
  • Intel Xeon 6315p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6325p

    HW
    Intel
    all versions
  • Intel Xeon 6325p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6333p

    HW
    Intel
    all versions
  • Intel Xeon 6333p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6337p

    HW
    Intel
    all versions
  • Intel Xeon 6337p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6349p

    HW
    Intel
    all versions
  • Intel Xeon 6349p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6353p

    HW
    Intel
    all versions
  • Intel Xeon 6353p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6357p

    HW
    Intel
    all versions
  • Intel Xeon 6357p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6369p

    HW
    Intel
    all versions
  • Intel Xeon 6369p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6377p

    HW
    Intel
    all versions
  • Intel Xeon 6377p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6503p

    HW
    Intel
    all versions
  • Intel Xeon 6503p B

    HW
    Intel
    all versions
  • Intel Xeon 6503p B Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6503p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6505p

    HW
    Intel
    all versions
  • Intel Xeon 6505p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6507p

    HW
    Intel
    all versions
  • Intel Xeon 6507p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6511p

    HW
    Intel
    all versions
  • Intel Xeon 6511p Firmware

    OS
    Intel
    all versions
  • Intel Xeon 6513p B

    HW
    Intel
    all versions
  • Intel Xeon 6513p B Firmware

    OS
    Intel
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2026-20716HIGH7.2same product

Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation ...

CVE-2026-20885HIGH7.0same product

Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may...

CVE-2026-20705MEDIUM6.8same product

Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0:...

CVE-2026-20775MEDIUM6.8same product

Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. Sy...

CVE-2023-31189MEDIUM5.2same product

Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an ...