Race Condition Vulnerability in 3rd Gen Intel Xeon Scalable Processors

CVE-2026-20707

What is CVE-2026-20707?

This vulnerability exists in the hardware logic of certain 3rd Generation Intel Xeon Scalable Processors, allowing an attacker with unprivileged access to exploit race conditions within Ring 3. By leveraging a complex attack, these adversaries may trigger a denial of service condition. While local access is necessary, the exploitation can occur without user interaction, provided the attacker has specific internal knowledge about the target system. This vulnerability primarily impacts system availability, highlighting the need for robust security measures to mitigate potential disruptions.

References