Executive Summary

Intel TDX module software versions prior to 1.5.05.46.698 contain improper input validation that could allow a privileged local user to exploit the flaw and potentially elevate privileges. The vulnerability is not currently listed in the CISA KEV database.

---

Authoritative CVE Metadata - CVSS Base Score: 7.9 (HIGH) - Published: 2024-05-16T21:15:58.507 - Last Modified: 2026-08-31T13:37:56.760

Original Description: Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.

"Who looks outside, dreams; who looks inside, awakes."

— Carl Jung