Intel Trace Hub Hardware Vulnerabilities CVE-2026-20709/CVE-2021-33150 Advisory

Vulnerability Overview This page primarily concerns two security vulnerabilities related to the Intel Trace Hub: 1. CVE-2026-20709: Description: A vulnerability exists in the default cryptographic key within Intel Trace Hub hardware. Affected Products: Intel Pentium Processor Silver Series, Intel Celeron Processor J Series, Intel Celeron Processor N Series. Risk: Hardware reverse engineering attackers combined with high-complexity attacks may leverage this vulnerability to escalate privileges. CVSS Score: Base Score 4.0 (Medium), Base Score 3.1 (Medium). 2. CVE-2021-33150: Description: The hardware allows test or debug logic to be activated at runtime. Affected Products: Certain Intel Trace Hub instances. Risk: Unauthorized users with physical access may enable privilege escalation. CVSS Score: Base Score 3.1 (Medium). Affected Products Affected Intel products include the following processor and chipset families: Intel Core Processors: 6th Gen, 7th Gen, 8th Gen, 10th Gen. Intel Atom Processors: A series, C3000 Automated Driving series, C3000 series, X E3900 series. Intel Chipsets: 100 series, 200 series, 300 series, C230 series, C240 series, C420 chipset, G20 series chipset, X299 chipset. Intel Celeron Processors: J Series, 3000 Series (38XX and 39XX), 4000 Series (42XX and 43XX), J3000/N3000 series, J4000/N4000 series. Intel Pentium Processors: Gold Processor Series (44XX and 65XX), Gold Processor Series (54XX), Processor 4000 Series (44XX), J4000/N4000 series, J5000/N5000 series. Intel Xeon Processors: D processor 2000 series. Mitigation Intel is releasing advisory guidance but will not provide additional mitigations for these chipset/SOC products. The following measures are recommended: 1. Firmware Updates: Configure systems at the end of manufacturing to enable Intel Firmware Version Control to prevent this and other vulnerabilities. 2. Apply Security Mitigations: Ensure all existing security mitigations provided by Intel are applied and that the system is running the latest firmware version from Intel. 3. Physical Security: Adhere to standard security practices to prevent unauthorized physical access. Additionally, the Intel SGX Provisioning Certification Service (Intel SGX PCS) will be updated to reference this security advisory.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Trace Hub Hardware Vulnerabilities CVE-2026-20709/CVE-2021-33150 Advisory