Improper Input Validation in Intel TDX Workload Attestation Software

CVE-2026-40693

What is CVE-2026-40693?

The Intel TDX Workload Attestation software is susceptible to improper input validation, specifically within Ring 3: User Applications. This flaw could be exploited by an unauthorized user who is authenticated, allowing for a denial of service under certain conditions. An attacker could leverage this vulnerability through local access, without the need for special internal knowledge or user interaction. The potential consequences primarily revolve around system availability, with the risk of the service being rendered inoperable.

References