Intel microcode update fixes eight security vulnerabilities

AFFILIATE_PRODUCTS:

Intel released the CPU microcode update “20260811” on August 11, 2026. This update fixes eight security vulnerabilities in existing processors. According to Phoronix’s Michael Larabel, the update includes the first microcode images for Bartlett Lake and Wildcat Lake. It also extends back to a broad range of processors from the 10th generation Intel Core family onward.

Details of the fixed vulnerabilities are as follows. INTEL-SA-01379 is a privilege escalation vulnerability related to Intel TDX in Xeon 6 processors, rated high severity. INTEL-SA-01404 is an information disclosure vulnerability in Intel TDX on Xeon 6. INTEL-SA-01423 is an information disclosure vulnerability involving incorrect data transfer during transient execution, affecting processors back to 10th generation Intel Core.

INTEL-SA-01428 is a privilege escalation vulnerability affecting all Intel Core Ultra series and Xeon 6. INTEL-SA-01435 is a privilege escalation vulnerability in Xeon 6 due to improper access control. INTEL-SA-01441 is a denial of service vulnerability in Core Ultra Series 2 and Series 3. INTEL-SA-01442 is a privilege escalation vulnerability in Intel Xeon processors related to incorrect control flow and improper input validation in certain firmware. INTEL-SA-01443 is a denial of service vulnerability caused by a hardware logic race condition in 3rd generation Xeon Scalable processors.

In addition to these vulnerabilities, the microcode update also fixes various functional issues. The update is available in the Intel microcode repository on GitHub, where details can be reviewed. This update shows that multiple vulnerabilities exist in Xeon 6 processors, which are widely used in cloud environments and data centers. In particular, vulnerabilities related to Intel TDX could affect highly sensitive workloads.

Related articles: Intel Arc Alchemist, HuC Media Acceleration with Xe Driver reports on the evolution of Intel’s Xe driver. Also, COSMIC Epoch 1.1 Ships with New System Monitor “COSMIC-Monitor” is relevant to security monitoring in the context of system monitoring. Intel regularly publishes microcode updates to maintain security and stability. This update includes the latest fixes as of August 2026, and system administrators are advised to apply it promptly.

Editorial Opinion

In the short term, this microcode update directly affects data center operators, especially those using Xeon 6. Fixing these vulnerabilities improves the security level of cloud providers and enterprise environments. Administrators need to move quickly on update deployment and compatibility testing. Vulnerabilities related to Intel TDX are directly tied to handling sensitive data, so a delayed response could create significant risk. In the long term, Intel’s continued evolution of its security measures could become a differentiator against competitors. Security-conscious companies may evaluate Intel’s response speed when selecting processors. However, the frequent discovery of vulnerabilities suggests design complexity and leaves Intel with technical challenges. Balancing security and performance will remain an ongoing challenge. From the editorial desk, we would like to consider the security issues highlighted by this update. How can the cycle of discovering and fixing security vulnerabilities be optimized at the hardware level? Also, how should users build mechanisms to automate microcode updates?

References

• “Intel CPU Microcode 20260811 Release Fixes Eight Security Issues”, by Michael Larabel — Phoronix, 2026-08-11T19:26:09.000Z (ARR)
• Source URL: https://www.phoronix.com/news/Intel-CPU-Microcode-20260811