Skip to main content

Intel Xeon Scalable CVE-2026-20707

| EUVDEUVD-2026-56472 MEDIUM
Hardware Logic Contains Race Conditions (CWE-1298)
2026-08-11 intel GHSA-f6fv-42vr-3qvp
Intel Denial Of Service 3Rd Gen Intel R Xeon R Scalable Processors Suse
6.8
CVSS 4.0 · Vendor: intel
Share

Severity by source

Vendor (intel) PRIMARY
6.8 MEDIUM
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.6 MEDIUM

Local vector and low privileges per description; scope changed because hardware DoS can cascade to co-resident VMs sharing the physical processor.

3.1 AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
4.0 AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
SUSE
5.6 HIGH
AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Primary rating from Vendor (intel).

CVSS VectorVendor: intel

Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Aug 11, 2026 - 21:58 vuln.today
CVE Published
Aug 11, 2026 - 16:25 cve.org
MEDIUM 6.8

DescriptionCVE.org

Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.

AnalysisAI

Hardware logic race conditions in 3rd Gen Intel Xeon Scalable Processors expose server environments to local denial of service. The flaw resides within Ring 3 (user-space) processor logic, where a low-privileged authenticated local user can exploit the race condition - provided they possess specialized internal knowledge of processor timing - to crash or destabilize the affected system. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires: (1) local access to a system running a 3rd Gen Intel Xeon Scalable Processor; (2) an authenticated user session with at minimum low-privilege credentials (PR:L per CVSS 4.0); (3) high attack complexity - the description explicitly states 'special internal knowledge' of processor internals is required, making this non-trivial to weaponize; (4) execution from Ring 3 (user-space), meaning no kernel or hypervisor access is needed. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 6.8 (Medium) accurately reflects a constrained but meaningful threat. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Consult Intel security advisory INTEL-SA-01443 (https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01443.html) as the authoritative remediation source; no exact microcode or firmware fix version is independently confirmed from the available data. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 12 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Micro 5.3 Affected
SUSE Linux Enterprise Micro 5.4 Affected

Share

CVE-2026-20707 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy