PT-2026-7308 · Intel · Tdx Module

Published 2026-02-10 · Updated 2026-02-11 · CVE-2025-32467

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TDX Module versions prior to tdx1.5

Description A flaw exists in some TDX Module versions before tdx1.5 within Ring 0, potentially leading to information disclosure. An authorized adversary with privileged user access, combined with a high complexity attack, may be able to expose data. This could occur via local access when specific attack requirements are met, without requiring special internal knowledge or user interaction. The issue may impact the confidentiality of the vulnerable system.

Recommendations Update to version tdx1.5 or later.

Fix

Weakness Enumeration

CWE-457

Related Identifiers

BDU:2026-01877

CVE-2025-32467

Affected Products

Tdx Module

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-32467 · Security Note
• https://bdu.fstec.ru/vul/2026-01877 · Security Note
• https://twitter.com/CVEnew/status/2021279069443137893 · Twitter Post
• https://t.me/true_secator/7898 · Telegram Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01397.html · Note