CVE-2026-20898

Name of the Vulnerable Software and Affected Versions Intel(R) Xeon(R) processors (affected versions not specified)

Description Improper access control in the firmware for the Alias Checking Trusted Module may allow an escalation of privilege. An adversary with access to startup code and System Management Mode (SMM)—a highly privileged execution mode in x86 CPUs—combined with a privileged user and a high complexity attack, may achieve this escalation. The issue can be triggered via local access without user interaction, though it requires special internal knowledge. This may result in high impacts on system confidentiality and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.