Intel Xeon Processor Firmware Advisory INTEL-SA-01442: CVE-2026-20713/2026-20901 Mitigation

Vulnerability Overview Title: 2026.3 IPU, Intel® Xeon® Processor Firmware Advisory Intel ID: INTEL-SA-01442 Vulnerability Category: Firmware Impact: Privilege Escalation Severity Rating: Medium First Publication Date: November 8, 2026 Last Revision Date: November 8, 2026 Summary: Potential security vulnerabilities in certain Intel® Xeon® processors could lead to privilege escalation. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Vulnerability Details: 1. CVE-2026-20713 - Description: Incorrect implementation of control flow in certain Intel® Xeon® processor firmware could lead to privilege escalation. A system software attacker combining a privileged user and a high-complexity attack could achieve privilege escalation. This result may occur via local access when attack requirements are present and no specialized knowledge or user interaction is needed. The potential vulnerability may affect the confidentiality (None), integrity (None), and availability (None) of the system, resulting in subsequent impacts on system confidentiality (High), integrity (High), and availability (None). - CVSS Base Score: 4.5 Medium - CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/S:CH/SA:N 2. CVE-2026-20901 - Description: Boot code and SMM attacks in certain Intel® Xeon® processor firmware could lead to privilege escalation. A privileged user combining a high-complexity attack could achieve data tampering. This result may occur via local access when attack requirements are present and no specialized knowledge or user interaction is needed. The potential vulnerability may affect the confidentiality (None), integrity (None), and availability (None) of the system, resulting in subsequent impacts on system confidentiality (None), integrity (High), and availability (None). - CVSS Base Score: 4.0 Medium - CVSS Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N Affected Products Affected Products: - 4th Gen Intel® Xeon® Scalable processor: - Server: B06F7, 0xB7, CVE-2026-20713 - Network and Edge: B06F8, 0x04, CVE-2026-20901 - Intel® Xeon® W2400 and W3400 Processors: - Server: B06F8, 0xB7, CVE-2026-20713 - Workstation: CVE-2026-20901 - 5th Gen Intel® Xeon® Scalable processor: - Server: C06F2, 0xB7, CVE-2026-20713, CVE-2026-20901 - Intel® Xeon®6 processor with P-cores: - Server: A06D0, A06D1, A06E0, A06E1, 0x95, CVE-2026-20713 - Intel® Xeon®6 SoC: - Server: A06E1, 0x4, CVE-2026-20713 - Workstation: CVE-2026-20713 - Intel® Xeon®6 processor with E-cores: - Server: A06F2, N/A, CVE-2026-20713 Remediation Recommendation: Intel recommends that users of affected Intel® processors update to the latest version provided by the system manufacturer to resolve this issue. Additional Information Acknowledgments: These issues were discovered internally by Intel employees. Intel and the broader technology industry adhere to a disclosure practice known as coordinated disclosure, where cybersecurity vulnerabilities are typically publicly disclosed only after mitigations are available. Revision History: - Version 1.0, Date November 8, 2026, Description: Initial Release Legal Disclaimer: Intel provides these materials “as is” without warranty of any kind, either express or implied. All products, dates, and specifications are based on current expectations and are subject to change without notice. Intel products and services may contain design defects or errors, known as errata, which may cause the product to deviate from published specifications. Known errata are available upon request. Reporting Vulnerabilities: If you have information regarding security concerns or vulnerabilities affecting Intel-branded products or technologies, please submit your report via the Intigriti platform to find eligibility criteria and submission instructions. All vulnerability reports must be submitted through Intigriti. For issues related to Intel external websites (Intel.com and related subdomains), please contact Intel’s external security research team. Need Product Support? If you have questions about Intel product security features, require technical support, or want product updates or patches, please visit the Support and Downloads page.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Xeon Processor Firmware Advisory INTEL-SA-01442: CVE-2026-20713/2026-20901 Mitigation