CVE catalog

CVE-2026-20917

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. Sys

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.11% · Oct 25, 2026

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianintel-microcodesid3.20260227.1vulnerable
Debianintel-microcodeforky3.20260227.1vulnerable
Debianintel-microcodetrixie3.20251111.1~deb13u1vulnerable
Debianintel-microcodetrixie-security3.20250812.1~deb13u1vulnerable
Debianintel-microcodebookworm3.20251111.1~deb12u1vulnerable
Debianintel-microcodebookworm-security3.20250812.1~deb12u1vulnerable
Alpineintel-ucode3.2120260812-r0fixed
Alpineintel-ucode3.2220260812-r0fixed
Alpineintel-ucode3.2320260812-r0fixed
Alpineintel-ucode3.2420260812-r0fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianintel-microcodesourcesid(unfixed)not yet assignedNot reported[1144158]
Debianintel-microcodesourceforky(unfixed)not yet assignedNot reported[1144158]
Debianintel-microcodesourcetrixie(unfixed)not yet assignedNot reported[1144158]
Debianintel-microcodesourcebookworm(unfixed)not yet assignedNot reported[1144158]
Alpineintel-ucodeapk3.2120260812-r0Not reportedALPINE-CVE-2026-20917Not reported
Alpineintel-ucodeapk3.2220260812-r0Not reportedALPINE-CVE-2026-20917Not reported
Alpineintel-ucodeapk3.2320260812-r0Not reportedALPINE-CVE-2026-20917Not reported
Alpineintel-ucodeapk3.2420260812-r0Not reportedALPINE-CVE-2026-20917Not reported

[Debian bug #1144158]

Notes

[trixie] intel-microcode: As usual fixed top-down, expose first in unstable, then likely point release [bookworm] intel-microcode: As usual fixed top-down, expose first in unstable, then likely point release

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [intel-microcode]Affected
    Details (1)

    • 3.20251111.1~deb12u1 · amd64 · bookworm

      Affected

      nvd · intel-microcode · debian · bookworm; nvd · intel-microcode · debian · 12

[Debian 13 (Trixie)]

  • [intel-microcode]Affected
    Details (1)

    • 3.20251111.1~deb13u1 · amd64 · trixie

      Affected

      nvd · intel-microcode · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]