Escalation of Privilege Vulnerability in Intel's TDX Migration Trust Domain

CVE-2026-62929

What is CVE-2026-62929?

An expired pointer dereference vulnerability exists in the implementation of the virtio-vsock for the Intel TDX Migration Trust Domain (MigTD) within the hypervisor's Ring 0. This issue allows a system software adversary with privileged access to potentially escalate privileges and disclose sensitive information. The exploit may occur via local access, as it does not require special internal knowledge or user interaction. This vulnerability poses significant risks to the confidentiality, integrity, and availability of affected systems, highlighting the need for immediate security measures and updates.

References