Escalation of Privilege in Intel TDX Migration Trust Domain's Hypervisor
CVE-2026-60138

8.4HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Tdx Migration Trust Domain (migtd)
Vendor
CVE Published:
10 November 2026

What is CVE-2026-60138?

An out-of-range pointer offset issue in the virtio-vsock implementation of Intel's TDX Migration Trust Domain can lead to potential escalation of privilege. This vulnerability allows system software adversaries with privileged access to exploit the flaw locally, without needing special internal knowledge or user interaction. If exploited, it could compromise the confidentiality, integrity, and availability of affected systems, posing significant risks to security.

Affected Version(s)

Intel(R) TDX Migration Trust Domain (MigTD) See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.