Information Disclosure in Intel(R) TDX Migration Trust Domain

CVE-2026-61377

What is CVE-2026-61377?

An information disclosure vulnerability exists in the Intel(R) TDX Migration Trust Domain (MigTD) due to sensitive information not being cleared before reuse in Ring 0. This flaw may allow a system software adversary with privileged user access to potentially expose data, enabling a local attack that necessitates no special internal knowledge or user interaction. While the exposure primarily affects system confidentiality, it raises significant concerns regarding the security integrity of the affected systems.

References