Insecure Information Storage in Intel TDX Module Affects Intel Platforms

CVE-2026-20705

What is CVE-2026-20705?

The Intel TDX module in certain Intel platforms has a vulnerability that allows for insecure storage of sensitive information within Ring 0: Trust Domain. This flaw can lead to potential information disclosure, allowing an adversary with system software privileges to exploit this vulnerability under specific attack conditions. Notably, the attack can occur through local access without requiring special internal knowledge or user interaction. The implications include significant concerns regarding data confidentiality, underscoring the need for enhanced security measures.

References