Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

CVE-2026-20707

medium

Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of servic…

Vendor / product: Intel — xeon silver 4316 firmware

Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.

CVSS
5.6
5.6 (CVSS v3.1)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2026-08-11 17:17
Modified: 2026-11-02 14:59
NVD status: Analyzed
Last synced 1 day ago
Verified against the source API 2026-11-03 07:34 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

intel / xeon_silver_4316_firmware all versions
intel / xeon_gold_5315y_firmware all versions
intel / xeon_d-1813nt_firmware all versions
intel / xeon_d-1823nt_firmware all versions
intel / xeon_d-1834_firmware all versions
intel / xeon_gold_6348_firmware all versions
intel / xeon_gold_6348h_firmware all versions
intel / xeon_gold_6354_firmware all versions
intel / xeon_platinum_8351n_firmware all versions
intel / xeon_platinum_8352m_firmware all versions
intel / xeon_platinum_8352s_firmware all versions
intel / xeon_platinum_8352v_firmware all versions
intel / xeon_platinum_8352y_firmware all versions
intel / xeon_platinum_8353h_firmware all versions
intel / xeon_platinum_8354h_firmware all versions
intel / xeon_platinum_8356h_firmware all versions
intel / xeon_platinum_8358_firmware all versions
intel / xeon_platinum_8358p_firmware all versions
intel / xeon_platinum_8360h_firmware all versions
intel / xeon_platinum_8360hl_firmware all versions
intel / xeon_platinum_8360y_firmware all versions
intel / xeon_platinum_8362_firmware all versions
intel / xeon_platinum_8368_firmware all versions
intel / xeon_platinum_8368q_firmware all versions
intel / xeon_platinum_8376h_firmware all versions
intel / xeon_platinum_8376hl_firmware all versions
intel / xeon_platinum_8380_firmware all versions
intel / xeon_platinum_8380h_firmware all versions
intel / xeon_platinum_8380hl_firmware all versions
intel / xeon_silver_4309y_firmware all versions
intel / xeon_silver_4310_firmware all versions
intel / xeon_silver_4310t_firmware all versions
intel / xeon_silver_4314_firmware all versions
intel / xeon_d-1844nt_firmware all versions
intel / xeon_d-1846_firmware all versions
intel / xeon_d-1848ter_firmware all versions
intel / xeon_d-2832nt_firmware all versions
intel / xeon_d-2843nt_firmware all versions
intel / xeon_d-2876nt_firmware all versions
intel / xeon_d-2896nt_firmware all versions
intel / xeon_d-2896ter_firmware all versions
intel / xeon_d-2899nt_firmware all versions
intel / xeon_d-2745nx_firmware all versions
intel / xeon_d-2757nx_firmware all versions
intel / xeon_d-2777nx_firmware all versions
intel / xeon_d-2798nx_firmware all versions
intel / xeon_d-1702_firmware all versions
intel / xeon_d-1712tr_firmware all versions
intel / xeon_d-1713nt_firmware all versions
intel / xeon_d-1713nte_firmware all versions

Weakness classification (CWE)

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01443.html

References

Data sources

NVD CVE API 2.0 — fetched 2026-11-03 07:34 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

Related CVEs