Improper Initialization in Intel TDX Migration Trust Domain of MigTD Product
CVE-2026-63028

5.1MEDIUM

Key Information:

Vendor

Intel

Vendor
CVE Published:
10 November 2026

What is CVE-2026-63028?

The MigTD component within Intel's TDX architecture contains a vulnerability relating to improper initialization of virtio-vsock stream handling. This issue has the potential to allow a denial of service, leading to possible data corruption even without user interaction. Attackers with local access could exploit this flaw, posing a risk to the operational stability of affected systems. Though access requirements are minimal, the implications for system performance and reliability are noteworthy, necessitating prompt attention to secure configurations.

Affected Version(s)

Intel(R) TDX Migration Trust Domain (MigTD) See references

References

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.