Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
CVSS Details
- CVSS 4.0 Base Score: 4.5 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade intel-ucode | Aug 31, 2026 | Aug 11, 2026 |
| Amazon_linux_2023 | — | Upgrade microcode_ctl | Sep 1, 2026 | Aug 11, 2026 |
| Dell Poweredge Dsa2026355 | — | Upgrade Dell PowerEdge to the latest version | Sep 3, 2026 | Sep 1, 2026 |
| Redhat_linux | — | Upgrade microcode_ctlNo solution exists | Aug 17, 2026 | Aug 11, 2026 |
| Rocky_linux | — | Upgrade microcode_ctl | Sep 10, 2026 | Sep 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub