CVE-2026-20898
Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.12%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
- CVSS 4.0
- 8.5 HIGHCVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.12% probability · 2th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- intel/xeon 6315p firmware · intel/xeon 6325p firmware · intel/xeon 6333p firmware · intel/xeon 6337p firmware · intel/xeon 6349p firmware · intel/xeon 6353p firmware · intel/xeon 6357p firmware · intel/xeon 6369p firmware · intel/xeon 6377p firmware · intel/xeon 6503p firmware · intel/xeon 6503p-b firmware · intel/xeon 6505p firmware · intel/xeon 6507p firmware · intel/xeon 6511p firmware · intel/xeon 6513p-b firmware · intel/xeon 6515p firmware · intel/xeon 6516p-b firmware · intel/xeon 6517p firmware · intel/xeon 6518p-b firmware · intel/xeon 6520p firmware · +40 more
- Source
- secure@intel.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.