Description
Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without any user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and no effect on availability. Subsequent system impacts include reduced confidentiality (low), integrity (low), and no effect on availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Intel(R) Trust Domain Extensions (Intel(R) TDX) | See references | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | microcode_ctl | 4:20260812-1.0.3.el8_10 | ELSA-2026-500239 |
Advisories 3
- WID-SEC-2026-2772 Intel Prozessor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 9, 2026
- WID-SEC-2026-2912 Dell PowerScale OneFS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 30, 2026
- ELSA-2026-500239 Important: microcode_ctl security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Sep 16, 2026