CVE-2026-20760
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R)...
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
CVE-2026-20760- CVSS 4.0
- 6.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-1260, CWE-1260
- Updated
- 2026-11-02
EUVDEUVD-2026-56489
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
EUVD-2026-56489- CVSS 4.0
- 6.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-3v3f-887c-p9f4
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R)...
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
GHSA-3v3f-887c-p9f4- CVSS 4.0
- 6.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-1260
- Updated
- 2026-11-02
NVD
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
CVE-2026-20760- CVSS 4.0
- 6.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-1260
- Updated
- 2026-11-02
OSVALPINE-CVE-2026-20760
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
ALPINE-CVE-2026-20760- CVSS 4.0
- 6.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-20760
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
DEBIAN-CVE-2026-20760- CVSS 4.0
- 6.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-05
Show 12 moreShow less
OSVOESA-2026-3408
microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs.
Security Fix(es):
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.(CVE-2025-31936)
Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.(CVE-2025-31938)
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.(CVE-2025-35973)
Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.(CVE-2026-20707)
Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.(CVE-2026-20713)
Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality…
- Record
OESA-2026-3408- CVSS 4.0
- 7.2 High
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-20760
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- Record
UBUNTU-CVE-2026-20760- CVSS 4.0
- 6.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - Updated
- 2026-11-02
OSVMGASA-2026-0374 No score
Updated microcode packages fix security vulnerabilities
A potential security vulnerability for some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions (Intel® TDX) may allow escalation of privilege. (CVE-2025-31936) A potential security vulnerability in some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions (Intel® TDX) may allow information disclosure. (CVE-2025-31938) A potential security vulnerability in some Intel® Processors may allow information disclosure. (CVE-2026-20917) A potential security vulnerability in some Intel® Processors may allow escalation of privilege. (CVE-2025-35973) A potential security vulnerability in some Intel® Processors may allow escalation of privilege. (CVE-2026-20716) A potential security vulnerability in some Intel® Processors may allow denial of service. (CVE-2026-20760) Potential security vulnerabilities in some Intel® Xeon® Processors may allow escalation of privilege. (CVE-2026-20713) A potential security vulnerability in some 3rd Gen Intel® Xeon® Scalable Processors may allow denial of service. (CVE-2026-20707)
- Record
MGASA-2026-0374- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11599-1 No score
ucode-intel-20260812-1.1 on GA media
These are all security issues fixed in the ucode-intel-20260812-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11599-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21736-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
-
Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
-
Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)
-
CVE-2025-35979: Security updates for INTEL-SA-01420
-
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html
-
Update for various functional issues.
New Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores
-
-
Update to microcode-20260227:
-
Update for functional issues. Refer to Intel� Xeon� 6700P-B/6500P-B-Series SoC with P-Cores for details.
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
-
- Record
openSUSE-SU-2026:21736-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23449-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:23449-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23459-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
-
Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
-
Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)
-
CVE-2025-35979: Security updates for INTEL-SA-01420
-
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html
-
Update for various functional issues.
New Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores
-
-
Update to microcode-20260227:
-
Update for functional issues. Refer to Intel Xeon 6700P-B/6500P-B-Series SoC with P-Cores for details.
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
-
- Record
SUSE-SU-2026:23459-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23539-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:23539-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23602-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
-
Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
-
Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
-
Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)
-
CVE-2025-35979: Security updates for INTEL-SA-01420
-
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html
-
Update for various functional issues.
New Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores
-
-
Update to microcode-20260227:
-
Update for functional issues. Refer to Intel Xeon 6700P-B/6500P-B-Series SoC with P-Cores for details.
Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
-
- Record
SUSE-SU-2026:23602-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3917-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:3917-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4019-1 No score
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:4019-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4025-1 No score
Security update for ucode-intel
This update for ucode-intel fixes the following issues:
- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
- Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
- Security updates for INTEL-SA-01379 / CVE-2025-31936
- Security updates for INTEL-SA-01404 / CVE-2025-31938
- Security updates for INTEL-SA-01423 / CVE-2026-20917
- Security updates for INTEL-SA-01428 / CVE-2025-35973
- Security updates for INTEL-SA-01435 / CVE-2026-20716
- Security updates for INTEL-SA-01441 / CVE-2026-20760
- Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
- Security updates for INTEL-SA-01443 / CVE-2026-20707
- Update for functional issues.
- Record
SUSE-SU-2026:4025-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
intel-ucodeAlpine:v3.21 |
before 20260812-r0 | 20260812-r0 |
intel-ucodeAlpine:v3.22 |
before 20260812-r0 | 20260812-r0 |
intel-ucodeAlpine:v3.23 |
before 20260812-r0 | 20260812-r0 |
intel-ucodeAlpine:v3.24 |
before 20260812-r0 | 20260812-r0 |
intel-ucodeAlpaquita:23 |
20230516a-r0 up to 20260812-r0 | 20260812-r0 |
intel-ucodeAlpaquita:25 |
20250512-r0 up to 20260812-r0 | 20260812-r0 |
intel-ucodeAlpaquita:stream |
20230214-r0 up to 20260812-r0 | 20260812-r0 |
intel-microcodeDebian:12 |
All versions, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
None known |
intel-microcodeDebian:13 |
All versions, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
None known |
intel-microcodeDebian:14 |
before 3.20260925.1, plus listed versions 0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2 Show 45 moreShow less0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1 |
3.20260925.1 |
Show 39 moreShow less
| Package | Affected | Fixed |
|---|---|---|
microcodeMageia:10 From an advisory covering 8 CVEs |
before 0.20260812-1.mga10.nonfree | 0.20260812-1.mga10.nonfree |
microcodeMageia:9 From an advisory covering 8 CVEs |
before 0.20260812-1.mga9.nonfree | 0.20260812-1.mga9.nonfree |
microcode_ctlopenEuler:20.03-LTS-SP4 From an advisory covering 9 CVEs |
before 20260811-1.oe2003sp4 | 20260811-1.oe2003sp4 |
microcode_ctlopenEuler:22.03-LTS-SP4 From an advisory covering 9 CVEs |
before 20260811-1.oe2203sp4 | 20260811-1.oe2203sp4 |
microcode_ctlopenEuler:24.03-LTS-SP1 From an advisory covering 9 CVEs |
before 20260811-1.oe2403sp1 | 20260811-1.oe2403sp1 |
microcode_ctlopenEuler:24.03-LTS-SP3 From an advisory covering 9 CVEs |
before 20260811-1.oe2403sp3 | 20260811-1.oe2403sp3 |
microcode_ctlopenEuler:24.03-LTS-SP4 From an advisory covering 9 CVEs |
before 20260811-1.oe2403sp4 | 20260811-1.oe2403sp4 |
ucode-intelSUSE:Linux Micro 6.0 From an advisory covering 9 CVEs |
before 20260812-1.1 | 20260812-1.1 |
ucode-intelSUSE:Linux Micro 6.2 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
ucode-intelSUSE:Linux Micro 6.1 From an advisory covering 9 CVEs |
before 20260812-slfo.1.1_1.1 | 20260812-slfo.1.1_1.1 |
ucode-intelSUSE:Linux Enterprise Server 16.0 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
ucode-intelSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 9 CVEs |
before 20260812-164.1 | 20260812-164.1 |
ucode-intelSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 9 CVEs |
before 20260812-164.1 | 20260812-164.1 |
microcode_ctlSUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 9 CVEs |
before 1.17-102.83.98.1 | 1.17-102.83.98.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.3 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.4 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Micro 5.5 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
ucode-intelSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 9 CVEs |
before 20260812-150200.68.1 | 20260812-150200.68.1 |
intel-microcodeUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2 Show 17 moreShow less3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.23.20210608.0ubuntu0.14.04.1+esm1 |
None known |
intel-microcodeUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1 Show 28 moreShow less3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.13.20210608.0ubuntu0.16.04.1+esm13.20220510.0ubuntu0.16.04.1+esm13.20230214.0ubuntu0.16.04.1+esm13.20230808.0ubuntu0.16.04.1+esm13.20231114.0ubuntu0.16.04.1+esm13.20240514.0ubuntu0.16.04.1+esm13.20240813.0ubuntu0.16.04.1+esm23.20240910.0ubuntu0.16.04.1+esm13.20241112.0ubuntu0.16.04.1+esm13.20250211.0ubuntu0.16.04.1+esm13.20250512.0ubuntu0.16.04.1+esm13.20250812.0ubuntu0.16.04.1+esm13.20260210.0ubuntu0.16.04.1+esm1 |
None known |
intel-microcodeUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1 Show 28 moreShow less3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.13.20210608.0ubuntu0.18.04.13.20220510.0ubuntu0.18.04.13.20220809.0ubuntu0.18.04.13.20230214.0ubuntu0.18.04.13.20230808.0ubuntu0.18.04.1+esm13.20231114.0ubuntu0.18.04.1+esm13.20240514.0ubuntu0.18.04.1+esm13.20240813.0ubuntu0.18.04.1+esm23.20240910.0ubuntu0.18.04.1+esm13.20241112.0ubuntu0.18.04.1+esm13.20250211.0ubuntu0.18.04.1+esm13.20250512.0ubuntu0.18.04.1+esm13.20250812.0ubuntu0.18.04.1+esm13.20260210.0ubuntu0.18.04.1+esm1 |
None known |
intel-microcodeUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0 Show 19 moreShow less3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.13.20210608.0ubuntu0.20.04.13.20220510.0ubuntu0.20.04.13.20220809.0ubuntu0.20.04.13.20230214.0ubuntu0.20.04.13.20230808.0ubuntu0.20.04.13.20231114.0ubuntu0.20.04.13.20240514.0ubuntu0.20.04.13.20240813.0ubuntu0.20.04.23.20240910.0ubuntu0.20.04.13.20241112.0ubuntu0.20.04.13.20250211.0ubuntu0.20.04.13.20250512.0ubuntu0.20.04.13.20250812.0ubuntu0.20.04.1+esm13.20260210.0ubuntu0.20.04.1+esm1 |
None known |
intel-microcodeUbuntu:22.04:LTS |
All versions, plus listed versions 3.20210608.2ubuntu13.20220510.0ubuntu0.22.04.13.20220809.0ubuntu0.22.04.13.20230214.0ubuntu0.22.04.13.20230808.0ubuntu0.22.04.1 Show 9 moreShow less3.20231114.0ubuntu0.22.04.13.20240514.0ubuntu0.22.04.13.20240813.0ubuntu0.22.04.23.20240910.0ubuntu0.22.04.13.20241112.0ubuntu0.22.04.13.20250211.0ubuntu0.22.04.13.20250512.0ubuntu0.22.04.13.20250812.0ubuntu0.22.04.13.20260210.0ubuntu0.22.04.1 |
None known |
intel-microcodeUbuntu:24.04:LTS |
All versions, plus listed versions 3.20230808.13.20231114.0ubuntu13.20231114.13.20240312.13.20240312.1build1 Show 8 moreShow less3.20240514.0ubuntu0.24.04.13.20240813.0ubuntu0.24.04.23.20240910.0ubuntu0.24.04.13.20241112.0ubuntu0.24.04.13.20250211.0ubuntu0.24.04.13.20250512.0ubuntu0.24.04.13.20250812.0ubuntu0.24.04.13.20260210.0ubuntu0.24.04.1 |
None known |
intel-microcodeUbuntu:26.10 |
All versions, plus listed versions 3.20260210.1ubuntu23.20260227.1ubuntu1 |
None known |
intel-microcodeUbuntu:26.04:LTS |
All versions, plus listed versions 3.20250512.1ubuntu13.20250812.1ubuntu13.20260210.1ubuntu13.20260210.1ubuntu2 |
None known |
ucode-intelopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 20260812-1.1 | 20260812-1.1 |
ucode-intelopenSUSE:Leap 16.0 From an advisory covering 10 CVEs |
before 20260812-160000.1.1 | 20260812-160000.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| affected, facts | OSV | |
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-20760 is a medium vulnerability (CVSS 6.8) in microcode, published August 11, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 0th percentile. Fixed in intel-ucode 20260812-r0.
References
intel.com/content/www/us/en/security-center/advisory/intel-sa-01441.html
nvd.nist.gov/vuln/detail/CVE-2026-20760
github.com/advisories/GHSA-3v3f-887c-p9f4
security.alpinelinux.org/vuln/CVE-2026-20760
docs.bell-sw.com/security/cves/CVE-2026-20760
security-tracker.debian.org/tracker/CVE-2026-20760
Show 34 moreShow less
advisories.mageia.org/MGASA-2026-0374.html
bugs.mageia.org/show_bug.cgi?id=36155
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-3408
suse.com/support/update/announcement/2026/suse-su-202623449-1
bugzilla.suse.com/1274785
ubuntu.com/security/CVE-2026-20760
cve.org/CVERecord?id=CVE-2026-20760
Left out here: 482 versions and the rest of 1 source description. The JSON record has them.