CVE-2026-20707

Awaiting Analysis Awaiting Analysis - Queue

Race Condition in 3rd Gen Intel Xeon Scalable Processors

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-20707

EUVD

EUVD-2026-56472

Affected Vendors & Products

Vendor	Product	Version / Range
intel	3rd_gen_xeon_scalable_processors	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1298	A race condition in the hardware logic results in undermining security guarantees of the system.

Attack-Flow Graph

Executive Summary

This vulnerability involves race conditions in hardware logic for some 3rd Gen Intel Xeon Scalable Processors. An unprivileged attacker with authenticated user access could exploit this to cause a denial of service. The attack requires local access, high complexity, and no user interaction.

Detection Guidance

Detection of this vulnerability requires checking for specific hardware logic race conditions in 3rd Gen Intel Xeon Scalable Processors. No direct commands are provided in the context. Contact Intel support or use their official tools for hardware-level vulnerability detection.

Impact Analysis

The vulnerability may lead to system unavailability (denial of service) due to race conditions in hardware logic. It does not directly impact confidentiality or integrity but could disrupt system operations, potentially causing downtime or service interruptions.

Compliance Impact

This vulnerability primarily impacts system availability due to potential denial of service conditions. It does not directly affect confidentiality or integrity. Compliance impact depends on whether availability is a critical requirement for standards like GDPR or HIPAA in the affected system context.

Mitigation Strategies

Apply Intel's official microcode updates or firmware patches for affected processors. Monitor Intel's security advisories for updates. Ensure system availability is prioritized due to high impact on availability.

Hi! I’m here to help you understand CVE-2026-20707. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70