Information Disclosure Vulnerability in TDX Module by Intel

CVE-2025-32467

What is CVE-2025-32467?

An information disclosure vulnerability exists in Intel's TDX Module for versions prior to tdx1.5. This issue arises from the use of an uninitialized variable within Ring 0 of the hypervisor framework. An authorized adversary with privileged user access can exploit this vulnerability under specific conditions, enabling potential data exposure through local access without necessitating any user interaction. As a result, it poses a risk to the confidentiality of the affected systems, although the integrity and availability of the system remain unaffected. It is essential for users of the software to remain vigilant and apply recommended updates to safeguard against such vulnerabilities.

References