Every CVE Search/ Get API key

CVE-2026-20901

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an...

4.0 MediumFix available

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
None

Exploit likelihood

0.10%Unchanged since Aug 12, 2026
90%50%10%1%

What each source reports

CVE List Score used 4.0

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Record
CVE-2026-20901
CVSS 4.0
4.0 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2026-56788 4.0

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Record
EUVD-2026-56788
CVSS 4.0
4.0 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-j38j-4xcw-8784 4.0

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an...

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Record
GHSA-j38j-4xcw-8784
CVSS 4.0
4.0 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-20
Updated
2026-11-02
NVD 4.0

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Record
CVE-2026-20901
CVSS 4.0
4.0 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-20
Updated
2026-11-02
OSVBELL-CVE-2026-20901 5.3
Record
BELL-CVE-2026-20901
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2026-20901 5.3

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Record
DEBIAN-CVE-2026-20901
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-05
Show 10 moreShow less
OSVOESA-2026-3408 7.2

microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs.

Security Fix(es):

Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.(CVE-2025-31936)

Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.(CVE-2025-31938)

Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.(CVE-2025-35973)

Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.(CVE-2026-20707)

Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.(CVE-2026-20713)

Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality…

Record
OESA-2026-3408
CVSS 4.0
7.2 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVUBUNTU-CVE-2026-20901 4.0

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Record
UBUNTU-CVE-2026-20901
CVSS 4.0
4.0 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVopenSUSE-SU-2026:21736-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)

    • Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.

  • Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)

    • Security updates for INTEL-SA-01379 / CVE-2025-31936
    • Security updates for INTEL-SA-01404 / CVE-2025-31938
    • Security updates for INTEL-SA-01423 / CVE-2026-20917
    • Security updates for INTEL-SA-01428 / CVE-2025-35973
    • Security updates for INTEL-SA-01435 / CVE-2026-20716
    • Security updates for INTEL-SA-01441 / CVE-2026-20760
    • Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
    • Security updates for INTEL-SA-01443 / CVE-2026-20707
    • Update for functional issues.

  • Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)

    • CVE-2025-35979: Security updates for INTEL-SA-01420

    • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html

    • Update for various functional issues.

      New Platforms

      | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)

      Updated Platforms

      | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores

  • Update to microcode-20260227:

    • Update for functional issues. Refer to Intel� Xeon� 6700P-B/6500P-B-Series SoC with P-Cores for details.

      Updated Platforms

      | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores

Record
openSUSE-SU-2026:21736-1
Updated
2026-11-02
OSVSUSE-SU-2026:23449-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
    • Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
  • Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
    • Security updates for INTEL-SA-01379 / CVE-2025-31936
    • Security updates for INTEL-SA-01404 / CVE-2025-31938
    • Security updates for INTEL-SA-01423 / CVE-2026-20917
    • Security updates for INTEL-SA-01428 / CVE-2025-35973
    • Security updates for INTEL-SA-01435 / CVE-2026-20716
    • Security updates for INTEL-SA-01441 / CVE-2026-20760
    • Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
    • Security updates for INTEL-SA-01443 / CVE-2026-20707
    • Update for functional issues.
Record
SUSE-SU-2026:23449-1
Updated
2026-11-02
OSVSUSE-SU-2026:23459-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)

    • Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.

  • Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)

    • Security updates for INTEL-SA-01379 / CVE-2025-31936
    • Security updates for INTEL-SA-01404 / CVE-2025-31938
    • Security updates for INTEL-SA-01423 / CVE-2026-20917
    • Security updates for INTEL-SA-01428 / CVE-2025-35973
    • Security updates for INTEL-SA-01435 / CVE-2026-20716
    • Security updates for INTEL-SA-01441 / CVE-2026-20760
    • Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
    • Security updates for INTEL-SA-01443 / CVE-2026-20707
    • Update for functional issues.

  • Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)

    • CVE-2025-35979: Security updates for INTEL-SA-01420

    • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html

    • Update for various functional issues.

      New Platforms

      | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)

      Updated Platforms

      | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores

  • Update to microcode-20260227:

    • Update for functional issues. Refer to Intel Xeon 6700P-B/6500P-B-Series SoC with P-Cores for details.

      Updated Platforms

      | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores

Record
SUSE-SU-2026:23459-1
Updated
2026-11-02
OSVSUSE-SU-2026:23539-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
    • Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
  • Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
    • Security updates for INTEL-SA-01379 / CVE-2025-31936
    • Security updates for INTEL-SA-01404 / CVE-2025-31938
    • Security updates for INTEL-SA-01423 / CVE-2026-20917
    • Security updates for INTEL-SA-01428 / CVE-2025-35973
    • Security updates for INTEL-SA-01435 / CVE-2026-20716
    • Security updates for INTEL-SA-01441 / CVE-2026-20760
    • Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
    • Security updates for INTEL-SA-01443 / CVE-2026-20707
    • Update for functional issues.
Record
SUSE-SU-2026:23539-1
Updated
2026-11-02
OSVSUSE-SU-2026:23602-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)

    • Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.

  • Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)

    • Security updates for INTEL-SA-01379 / CVE-2025-31936
    • Security updates for INTEL-SA-01404 / CVE-2025-31938
    • Security updates for INTEL-SA-01423 / CVE-2026-20917
    • Security updates for INTEL-SA-01428 / CVE-2025-35973
    • Security updates for INTEL-SA-01435 / CVE-2026-20716
    • Security updates for INTEL-SA-01441 / CVE-2026-20760
    • Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
    • Security updates for INTEL-SA-01443 / CVE-2026-20707
    • Update for functional issues.

  • Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)

    • CVE-2025-35979: Security updates for INTEL-SA-01420

    • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01420.html

    • Update for various functional issues.

      New Platforms

      | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3) | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)

      Updated Platforms

      | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2) | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores

  • Update to microcode-20260227:

    • Update for functional issues. Refer to Intel Xeon 6700P-B/6500P-B-Series SoC with P-Cores for details.

      Updated Platforms

      | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | GNR-D | B0/B1 | 06-ae-01/97 | 010002f3 | 01000303 | Xeon 6700P-B/6500P-B Series SoC with P-Cores

Record
SUSE-SU-2026:23602-1
Updated
2026-11-02
OSVSUSE-SU-2026:3917-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
    • Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
  • Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
    • Security updates for INTEL-SA-01379 / CVE-2025-31936
    • Security updates for INTEL-SA-01404 / CVE-2025-31938
    • Security updates for INTEL-SA-01423 / CVE-2026-20917
    • Security updates for INTEL-SA-01428 / CVE-2025-35973
    • Security updates for INTEL-SA-01435 / CVE-2026-20716
    • Security updates for INTEL-SA-01441 / CVE-2026-20760
    • Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
    • Security updates for INTEL-SA-01443 / CVE-2026-20707
    • Update for functional issues.
Record
SUSE-SU-2026:3917-1
Updated
2026-11-02
OSVSUSE-SU-2026:4019-1 No score

Security update for microcode_ctl

This update for microcode_ctl fixes the following issues:

  • Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
    • Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
  • Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
    • Security updates for INTEL-SA-01379 / CVE-2025-31936
    • Security updates for INTEL-SA-01404 / CVE-2025-31938
    • Security updates for INTEL-SA-01423 / CVE-2026-20917
    • Security updates for INTEL-SA-01428 / CVE-2025-35973
    • Security updates for INTEL-SA-01435 / CVE-2026-20716
    • Security updates for INTEL-SA-01441 / CVE-2026-20760
    • Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
    • Security updates for INTEL-SA-01443 / CVE-2026-20707
    • Update for functional issues.
Record
SUSE-SU-2026:4019-1
Updated
2026-11-02
OSVSUSE-SU-2026:4025-1 No score

Security update for ucode-intel

This update for ucode-intel fixes the following issues:

  • Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)
    • Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.
  • Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)
    • Security updates for INTEL-SA-01379 / CVE-2025-31936
    • Security updates for INTEL-SA-01404 / CVE-2025-31938
    • Security updates for INTEL-SA-01423 / CVE-2026-20917
    • Security updates for INTEL-SA-01428 / CVE-2025-35973
    • Security updates for INTEL-SA-01435 / CVE-2026-20716
    • Security updates for INTEL-SA-01441 / CVE-2026-20760
    • Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901
    • Security updates for INTEL-SA-01443 / CVE-2026-20707
    • Update for functional issues.
Record
SUSE-SU-2026:4025-1
Updated
2026-11-02

Affected products

Show 129 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
intel-ucode
Alpaquita:23
 20230516a-r0 and later None known
intel-ucode
Alpaquita:25
 20250512-r0 and later None known
intel-ucode
Alpaquita:stream
 20230214-r0 and later None known
intel-microcode
Debian:12
 All versions, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
 None known
intel-microcode
Debian:13
 All versions, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
 None known
intel-microcode
Debian:14
 before 3.20260925.1, plus listed versions
0.20080131-10.20080220-10.20080401-10.20080910-10.20080910-2
Show 45 moreShow less
0.20090330-10.20090927-10.20100826-10.20100914-10.20101123-10.20110428-10.20110915-10.20111110-10.20120606-11.20120606.11.20120606.21.20120606.31.20120606.41.20120606.51.20120606.61.20120606.6~bpo60+11.20120606.v2.11.20120606.v2.21.20120606.v2.2~bpo60+11.20130222.11.20130222.1~bpo60+11.20130222.31.20130222.41.20130222.51.20130222.61.20130808.11.20130808.21.20130906.11.20140122.11.20140122.1~bpo60+11.20140430.11.20140430.1~bpo60+11.20140624.11.20140624.1~bpo60+11.20140913.11.20140913.1~bpo60+11.20150121.12.20130808.12.20130808.1~bpo70+12.20130906.12.20130906.1~bpo70+12.20140122.12.20140122.1~bpo70+12.20140430.12.20140430.1~bpo70+1
3.20260925.1
microcode_ctl
openEuler:20.03-LTS-SP4
From an advisory covering 9 CVEs
 before 20260811-1.oe2003sp4
20260811-1.oe2003sp4
microcode_ctl
openEuler:22.03-LTS-SP4
From an advisory covering 9 CVEs
 before 20260811-1.oe2203sp4
20260811-1.oe2203sp4
microcode_ctl
openEuler:24.03-LTS-SP1
From an advisory covering 9 CVEs
 before 20260811-1.oe2403sp1
20260811-1.oe2403sp1
microcode_ctl
openEuler:24.03-LTS-SP3
From an advisory covering 9 CVEs
 before 20260811-1.oe2403sp3
20260811-1.oe2403sp3
Show 32 moreShow less
Affected packages
PackageAffectedFixed
microcode_ctl
openEuler:24.03-LTS-SP4
From an advisory covering 9 CVEs
 before 20260811-1.oe2403sp4
20260811-1.oe2403sp4
ucode-intel
SUSE:Linux Micro 6.0
From an advisory covering 9 CVEs
 before 20260812-1.1
20260812-1.1
ucode-intel
SUSE:Linux Micro 6.2
From an advisory covering 10 CVEs
 before 20260812-160000.1.1
20260812-160000.1.1
ucode-intel
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 20260812-slfo.1.1_1.1
20260812-slfo.1.1_1.1
ucode-intel
SUSE:Linux Enterprise Server 16.0
From an advisory covering 10 CVEs
 before 20260812-160000.1.1
20260812-160000.1.1
ucode-intel
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 10 CVEs
 before 20260812-160000.1.1
20260812-160000.1.1
ucode-intel
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 9 CVEs
 before 20260812-164.1
20260812-164.1
ucode-intel
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 9 CVEs
 before 20260812-164.1
20260812-164.1
microcode_ctl
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 9 CVEs
 before 1.17-102.83.98.1
1.17-102.83.98.1
ucode-intel
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
ucode-intel
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 9 CVEs
 before 20260812-150200.68.1
20260812-150200.68.1
intel-microcode
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.20130906.1ubuntu21.20130906.1ubuntu32.20140122.12.20140430.1ubuntu12.20140624-t-1ubuntu2
Show 17 moreShow less
3.20180108.0~ubuntu14.04.23.20180108.0+really20170707ubuntu14.04.13.20180312.0~ubuntu14.04.13.20180425.1~ubuntu0.14.04.13.20180425.1~ubuntu0.14.04.23.20180807a.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.13.20190514.0ubuntu0.14.04.23.20190618.0ubuntu0.14.04.13.20191112-0ubuntu0.14.04.23.20191115.1ubuntu0.14.04.13.20191115.1ubuntu0.14.04.23.20200609.0ubuntu0.14.04.03.20200609.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.13.20201110.0ubuntu0.14.04.23.20210608.0ubuntu0.14.04.1+esm1
 None known
intel-microcode
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
3.20150121.13.20151106.13.20170707.1~ubuntu16.04.03.20180108.0~ubuntu16.04.23.20180108.0+really20170707ubuntu16.04.1
Show 28 moreShow less
3.20180312.0~ubuntu16.04.13.20180425.1~ubuntu0.16.04.13.20180425.1~ubuntu0.16.04.23.20180807a.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.13.20190514.0ubuntu0.16.04.23.20190618.0ubuntu0.16.04.13.20191112-0ubuntu0.16.04.23.20191115.1ubuntu0.16.04.13.20191115.1ubuntu0.16.04.23.20200609.0ubuntu0.16.04.03.20200609.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.13.20201110.0ubuntu0.16.04.23.20210216.0ubuntu0.16.04.13.20210608.0ubuntu0.16.04.1+esm13.20220510.0ubuntu0.16.04.1+esm13.20230214.0ubuntu0.16.04.1+esm13.20230808.0ubuntu0.16.04.1+esm13.20231114.0ubuntu0.16.04.1+esm13.20240514.0ubuntu0.16.04.1+esm13.20240813.0ubuntu0.16.04.1+esm23.20240910.0ubuntu0.16.04.1+esm13.20241112.0ubuntu0.16.04.1+esm13.20250211.0ubuntu0.16.04.1+esm13.20250512.0ubuntu0.16.04.1+esm13.20250812.0ubuntu0.16.04.1+esm13.20260210.0ubuntu0.16.04.1+esm1
 None known
intel-microcode
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
3.20170707.13.20171117.13.20180108.13.20180108.1+really20171117.13.20180312.0~ubuntu18.04.1
Show 28 moreShow less
3.20180425.1~ubuntu0.18.04.13.20180425.1~ubuntu0.18.04.23.20180807a.0ubuntu0.18.04.13.20190514.0ubuntu0.18.04.23.20190514.0ubuntu0.18.04.33.20190618.0ubuntu0.18.04.13.20191112-0ubuntu0.18.04.23.20191115.1ubuntu0.18.04.13.20191115.1ubuntu0.18.04.23.20200609.0ubuntu0.18.04.03.20200609.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.13.20201110.0ubuntu0.18.04.23.20210216.0ubuntu0.18.04.13.20210608.0ubuntu0.18.04.13.20220510.0ubuntu0.18.04.13.20220809.0ubuntu0.18.04.13.20230214.0ubuntu0.18.04.13.20230808.0ubuntu0.18.04.1+esm13.20231114.0ubuntu0.18.04.1+esm13.20240514.0ubuntu0.18.04.1+esm13.20240813.0ubuntu0.18.04.1+esm23.20240910.0ubuntu0.18.04.1+esm13.20241112.0ubuntu0.18.04.1+esm13.20250211.0ubuntu0.18.04.1+esm13.20250512.0ubuntu0.18.04.1+esm13.20250812.0ubuntu0.18.04.1+esm13.20260210.0ubuntu0.18.04.1+esm1
 None known
intel-microcode
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
3.20190918.1ubuntu13.20191115.1ubuntu13.20191115.1ubuntu23.20191115.1ubuntu33.20200609.0ubuntu0.20.04.0
Show 19 moreShow less
3.20200609.0ubuntu0.20.04.13.20200609.0ubuntu0.20.04.23.20201110.0ubuntu0.20.04.13.20201110.0ubuntu0.20.04.23.20210216.0ubuntu0.20.04.13.20210608.0ubuntu0.20.04.13.20220510.0ubuntu0.20.04.13.20220809.0ubuntu0.20.04.13.20230214.0ubuntu0.20.04.13.20230808.0ubuntu0.20.04.13.20231114.0ubuntu0.20.04.13.20240514.0ubuntu0.20.04.13.20240813.0ubuntu0.20.04.23.20240910.0ubuntu0.20.04.13.20241112.0ubuntu0.20.04.13.20250211.0ubuntu0.20.04.13.20250512.0ubuntu0.20.04.13.20250812.0ubuntu0.20.04.1+esm13.20260210.0ubuntu0.20.04.1+esm1
 None known
intel-microcode
Ubuntu:22.04:LTS
 All versions, plus listed versions
3.20210608.2ubuntu13.20220510.0ubuntu0.22.04.13.20220809.0ubuntu0.22.04.13.20230214.0ubuntu0.22.04.13.20230808.0ubuntu0.22.04.1
Show 9 moreShow less
3.20231114.0ubuntu0.22.04.13.20240514.0ubuntu0.22.04.13.20240813.0ubuntu0.22.04.23.20240910.0ubuntu0.22.04.13.20241112.0ubuntu0.22.04.13.20250211.0ubuntu0.22.04.13.20250512.0ubuntu0.22.04.13.20250812.0ubuntu0.22.04.13.20260210.0ubuntu0.22.04.1
 None known
intel-microcode
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.20230808.13.20231114.0ubuntu13.20231114.13.20240312.13.20240312.1build1
Show 8 moreShow less
3.20240514.0ubuntu0.24.04.13.20240813.0ubuntu0.24.04.23.20240910.0ubuntu0.24.04.13.20241112.0ubuntu0.24.04.13.20250211.0ubuntu0.24.04.13.20250512.0ubuntu0.24.04.13.20250812.0ubuntu0.24.04.13.20260210.0ubuntu0.24.04.1
 None known
intel-microcode
Ubuntu:26.10
 All versions, plus listed versions
3.20260210.1ubuntu23.20260227.1ubuntu1
 None known
intel-microcode
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.20250512.1ubuntu13.20250812.1ubuntu13.20260210.1ubuntu13.20260210.1ubuntu2
 None known
ucode-intel
openSUSE:Leap 16.0
From an advisory covering 10 CVEs
 before 20260812-160000.1.1
20260812-160000.1.1

History

History
RecordedChangedSources
affected
affected, factsOSV
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-20901 is a medium vulnerability (CVSS 4.0) in Intel Xeon Bronze 3408u, published August 11, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 0th percentile. Fixed in intel-microcode 3.20260925.1.

References

Show 30 moreShow less
This page doesn't list everything

Left out here: 482 versions and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open