Denial of Service Risk in Intel TDX Migration Trust Domain
CVE-2026-63027

5.3MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Tdx Migration Trust Domain (migtd)
Vendor
CVE Published:
10 November 2026

What is CVE-2026-63027?

The vulnerability stems from an incorrect behavior order in the get_tcb_level_by_svn function related to the Intel TDX Migration Trust Domain (MigTD) running in Ring 0. This flaw allows a network adversary to trigger a denial of service under specific conditions, necessitating no special internal knowledge and without any user interaction. Although the vulnerability itself does not directly compromise the confidentiality or integrity of the system, it does pose a potential risk to system availability, which could lead to broader implications for system performance and stability.

Affected Version(s)

Intel(R) TDX Migration Trust Domain (MigTD) See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.