CVE-2026-20707
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Hardware logic contains race conditions in 3rd Gen Intel Xeon Scalable Processors (Ring 3), which may allow denial of service. An unprivileged attacker with an authenticated user and a high complexity attack can cause system unavailability via local access, without user interaction.
Risk Assessment
Risk of system downtime due to denial of service, potentially affecting service availability.
Recommendation
Update firmware or microcode of 3rd Gen Intel Xeon Scalable Processors to the latest version with security fixes.
Original NVD description (English source)
Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.