CVE-2026-20901

Fixed in a distro release EPSS <1%CVSS 4.0

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Published 2026-08-11 · CVE record · OSV

Products: intel xeon_bronze_3408u_firmware, intel xeon_gold_5403n_firmware, intel xeon_gold_5411n_firmware, intel xeon_gold_5412u_firmware, intel xeon_gold_5415+_firmware, intel xeon_platinum_8592+_firmware, intel xeon_platinum_8592v_firmware, intel xeon_platinum_8593q_firmware, intel xeon_silver_4509y_firmware, intel xeon_silver_4510_firmware, intel xeon_silver_4510t_firmware, intel xeon_silver_4514y_firmware, intel xeon_silver_4516y+_firmware, intel xeon_gold_5416s_firmware, intel xeon_gold_5418n_firmware, intel xeon_gold_5418y_firmware, intel xeon_gold_5420+_firmware, intel xeon_gold_5423n_firmware, intel xeon_gold_5433n_firmware, intel xeon_gold_6403n_firmware, intel xeon_gold_6414u_firmware, intel xeon_gold_6416h_firmware, intel xeon_gold_6418h_firmware, intel xeon_gold_6421n_firmware, intel xeon_gold_6423n_firmware, intel xeon_gold_6426y_firmware, intel xeon_gold_6428n_firmware, intel xeon_gold_6430_firmware, intel xeon_gold_6433n_firmware, intel xeon_gold_6433ne_firmware, intel xeon_gold_6434_firmware, intel xeon_gold_6434h_firmware, intel xeon_gold_6438m_firmware, intel xeon_gold_6438n_firmware, intel xeon_gold_6438y+_firmware, intel xeon_gold_6442y_firmware, intel xeon_gold_6443n_firmware, intel xeon_gold_6444y_firmware, intel xeon_gold_6448h_firmware, intel xeon_gold_6448y_firmware, intel xeon_gold_6454s_firmware, intel xeon_gold_6458q_firmware, intel xeon_platinum_8444h_firmware, intel xeon_platinum_8450h_firmware, intel xeon_platinum_8452y_firmware, intel xeon_platinum_8454h_firmware, intel xeon_platinum_8458p_firmware, intel xeon_platinum_8460h_firmware, intel xeon_platinum_8460y+_firmware, intel xeon_platinum_8461v_firmware, intel xeon_platinum_8462y+_firmware, intel xeon_platinum_8468_firmware, intel xeon_platinum_8468h_firmware, intel xeon_platinum_8468v_firmware, intel xeon_platinum_8470_firmware, intel xeon_platinum_8470n_firmware, intel xeon_platinum_8470q_firmware, intel xeon_platinum_8471n_firmware, intel xeon_platinum_8480+_firmware, intel xeon_platinum_8490h_firmware, intel xeon_silver_4410t_firmware, intel xeon_silver_4410y_firmware, intel xeon_silver_4416+_firmware, intel xeon_bronze_3508u_firmware, intel xeon_gold_5512u_firmware, intel xeon_gold_5515+_firmware, intel xeon_gold_5520+_firmware, intel xeon_gold_6526y_firmware, intel xeon_gold_6530_firmware, intel xeon_gold_6534_firmware, intel xeon_gold_6538n_firmware, intel xeon_gold_6538y+_firmware, intel xeon_gold_6542y_firmware, intel xeon_gold_6544y_firmware, intel xeon_gold_6548n_firmware, intel xeon_gold_6548y+_firmware, intel xeon_gold_6554s_firmware, intel xeon_gold_6558q_firmware, intel xeon_platinum_8558_firmware, intel xeon_platinum_8558p_firmware, intel xeon_platinum_8558u_firmware, intel xeon_platinum_8562y+_firmware, intel xeon_platinum_8568y+_firmware, intel xeon_platinum_8570_firmware, intel xeon_platinum_8571n_firmware, intel xeon_platinum_8580_firmware, intel xeon_platinum_8581v_firmware

Distro releases