Executive Summary

Intel TDX module software versions prior to 1.5.05.46.698 contain improper input validation that allows a privileged local user to exploit the flaw and potentially elevate privileges. The vulnerability is not currently listed in the CISA KEV database.

---

Authoritative CVE Metadata - CVSS Base Score: 6.0 (MEDIUM) - Published: 2024-05-16T21:16:00.630 - Last Modified: 2026-08-31T13:37:56.760

Original Description: Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.

"If one advances confidently in the direction of his dream, and endeavours to live the life which he had imagines, he will meet with a success unexpected in common hours."

— Henry David Thoreau