CVE-2026-20716

CVE-2026-20716 involves improper access control affecting some Intel processors in Ring 3 (user applications). The issue could allow an escalation of privilege via a local attack by a simple hardware adversary who has an authenticated user and can perform a high-complexity attack with no user int...

CVE-2026-20716

Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

CVE-2026-20716

Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

EUVD-2026-56476

Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

PT-2026-70282

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Improper access control within Ring 3 the least privileged level of the CPU where user applications run may allow an escalation of privilege. A local hardware adversary with an...

PT-2026-70274

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Improper handling of values within Ring 0 the most privileged level of the CPU, used by the Kernel, Hypervisor, and Bare Metal OS may allow an escalation of privilege. A privileged...

HPESBHF05069 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01419, 2026.2 IPU, Intel Trust Domain Extensions (Intel TDX) module Advisory

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 HFP 2026.05.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31356 |...

PT-2026-70295

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Improper handling of overlap between protected memory ranges in some microcode within Ring 0: Hypervisor may allow an escalation of privilege. An authorized adversary with privilege...

PT-2026-70802

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Incorrect data forwarding during transient execution within Ring 0 Hypervisor and Kernel may lead to the exposure of sensitive information. A system software adversary with privileg...

2026.3 IPU, Intel® Processor Load Value Injection Zero Data Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20917 Description: Exposure of sensitive information caused by incorrect da...

HPESBHF05067 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01413, UEFI Reference Firmware Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 HFP 2026.05.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-35991 |...

HPESBHF05066 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01396, 2026.1 IPU, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31648 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N | 3.9 |...

New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs

An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT...

SUSE-SU-2026:2963-1 Security update for ucode-intel

This update for ucode-intel fixes the following issue: - CVE-2025-35979: data leaks fixed in 20260512 release bsc1265189. Other changes: - Intel CPU Microcode was updated to the 20260512 release bsc1265189. New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products...

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The publ...

HPESBHF05017 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01396, 2026.1 IPU, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to SimpliVity Gen11 Support Pack 20260605 HPE SimpliVity 380 Gen10 Plus - Prior to SimpliVity Gen10 Support Pack 20260605 CVSS Scores: | CVE |...

Astra Linux – Vulnerability in Intel Microcode

A observable discrepancy in the RAPL interface of certain Intel processors may allow a privileged user to potentially enable information disclosure through local access...

Astra Linux – Vulnerability in Linux 5.15

A NULL pointer dereference flaw was discovered in the Linux kernel’s KVM module. This flaw can lead to a denial of service in the x86emulateinsn function in arch/x86/kvm/emulate.c. The flaw occurs when an illegal instruction is executed on the guest CPU of the Intel model...

Astra Linux – Vulnerability in Intel Microcode

Improper isolation of shared resources in some IntelR processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-35979

A flaw was found in the kernel. This vulnerability, affecting some IntelR Processors, involves shared microarchitectural predictor state that influences transient execution within VMX non-root guest operation. An unprivileged software adversary with an authenticated user can exploit this locally ...