Description
Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.
Affected products
intel: tdx module; intel: xeon bronze 3408u; intel: xeon gold 5411n; intel: xeon gold 5412u; intel: xeon gold 5415; intel: xeon gold 5416s; intel: xeon gold 5418n; intel: xeon gold 5418y; intel: xeon gold 5420; intel: xeon gold 6414u; intel: xeon gold 6416h; intel: xeon gold 6418h; intel: xeon gold 6421n; intel: xeon gold 6426y; intel: xeon gold 6428n
References1
- intel.com/content/www/us/en/security-center/advisory/intel-sa-0… Vendor Advisory
Metrics
- CVSS 3.1
-
5.3
MEDIUM
Score source: NVD
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N - CVSS 4.0
-
6.8
MEDIUM
Score source: CNA
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 0% percentile: 3 · as of 12 November 2026
- CWE
- CWE-922
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.