CVE-2026-20898: High severity vulnerability
Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20898?
CVE-2026-20898 has a risk score of 44, indicating a moderate level of severity.
How does CVE-2026-20898 affect Intel(R) Xeon(R) processors?
CVE-2026-20898 allows for potential escalation of privilege due to improper access control in the firmware.
What type of attacks are possible with CVE-2026-20898?
Exploitation of CVE-2026-20898 may involve a sophisticated attack combining startup code and SMM adversary tactics.
Who is at risk from CVE-2026-20898?
Users of certain Intel(R) Xeon(R) processors could be at risk if they have a privileged user environment that is compromised.
What steps can be taken to mitigate CVE-2026-20898?
It is recommended to update the firmware of vulnerable Intel(R) Xeon(R) processors to the latest version to mitigate CVE-2026-20898.