CVE-2026-20903: Medium severity vulnerability
Protection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Event History
Frequently Asked Questions
What is CVE-2026-20903?
CVE-2026-20903 is a vulnerability that involves a protection mechanism failure in Intel(R) AI Containers versions before v0.4.0, allowing potential privilege escalation.
What is the severity of CVE-2026-20903?
The severity rating for CVE-2026-20903 is classified as 46.
How do I fix CVE-2026-20903?
To fix CVE-2026-20903, update Intel(R) AI Containers to version v0.4.0 or later.
Who is affected by CVE-2026-20903?
Users of Intel(R) AI Containers prior to version v0.4.0 may be affected by CVE-2026-20903.
What type of attack does CVE-2026-20903 allow?
CVE-2026-20903 allows an escalation of privilege attack when exploited by a system software adversary with privileged user access.