{
  "cveId": "CVE-2026-20917",
  "url": "https://patchblox.com/security/cve/CVE-2026-20917",
  "summary": "CVE-2026-20917 is fixed in 3 products on 1 platform, first by DEBIAN-CVE-2026-20917, released August 11, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "ucode-intel: This update for ucode-intel fixes the following issues:\n\n- Intel CPU Microcode was updated to the 20260812 release (b...",
  "description": "This update for ucode-intel fixes the following issues:\n\n- Intel CPU Microcode was updated to the 20260812 release (bsc#1274785)\n  - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms.\n- Intel CPU Microcode was updated to the 20260811 release (bsc#1274785)\n  - Security updates for INTEL-SA-01379 / CVE-2025-31936\n  - Security updates for INTEL-SA-01404 / CVE-2025-31938\n  - Security updates for INTEL-SA-01423 / CVE-2026-20917\n  - Security updates for INTEL-SA-01428 / CVE-2025-35973\n  - Security updates for INTEL-SA-01435 / CVE-2026-20716\n  - Security updates for INTEL-SA-01441 / CVE-2026-20760\n  - Security updates for INTEL-SA-01442 / CVE-2026-20713 / CVE-2026-20901\n  - Security updates for INTEL-SA-01443 / CVE-2026-20707\n  - Update for functional issues.",
  "published": "2026-08-11T18:17:24Z",
  "severity": "IMPORTANT",
  "cvss": 5.3,
  "epss": 0.0011,
  "epssPercentile": 0.01294,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "intel-microcode",
      "release": "Debian 14",
      "fixedVersion": "3.20260925.1",
      "fix": "DEBIAN-CVE-2026-20917",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-20917",
      "released": "2026-08-11T18:17:24Z"
    },
    {
      "platform": "linux",
      "product": "microcode_ctl",
      "release": "amzn 2023",
      "fixedVersion": "2:2.1-53.amzn2023.0.16",
      "fix": "ALAS2023-2026-2080",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2080",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "microcode_ctl",
      "release": "ol 10",
      "fixedVersion": "4:20260812-1.0.2.el9_8",
      "fix": "ELSA-2026-500239",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500239",
      "released": "2026-09-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "microcode_ctl",
      "release": "ol 8",
      "fixedVersion": "4:20260812-1.0.2.el9_8",
      "fix": "ELSA-2026-500239",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500239",
      "released": "2026-09-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "microcode_ctl",
      "release": "ol 9",
      "fixedVersion": "4:20260812-1.0.2.el9_8",
      "fix": "ELSA-2026-500239",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500239",
      "released": "2026-09-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ucode-intel",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "20260812-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21736-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21736-1",
      "released": "2026-09-02T09:34:17Z"
    },
    {
      "platform": "linux",
      "product": "ucode-intel",
      "release": "sles 15.6",
      "fixedVersion": "20260812-150200.68.1",
      "fix": "SUSE-SU-2026:4025-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4025-1",
      "released": "2026-09-07T07:43:47Z"
    },
    {
      "platform": "linux",
      "product": "ucode-intel",
      "release": "sles 15.7",
      "fixedVersion": "20260812-150200.68.1",
      "fix": "SUSE-SU-2026:4025-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4025-1",
      "released": "2026-09-07T07:43:47Z"
    },
    {
      "platform": "linux",
      "product": "ucode-intel",
      "release": "sles 16.0",
      "fixedVersion": "20260812-160000.1.1",
      "fix": "SUSE-SU-2026:23602-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23602-1",
      "released": "2026-09-21T08:31:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}