CVE-2023-47855

Improper authentication in the Intel(R) TDX module for some Intel platforms within Ring 0: Trust Domain may allow information disclosure and privilege escalation. A privileged user with a high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are high, availability low.

Insecure storage of sensitive information in Intel TDX module for some Intel platforms (Ring 0) may allow information disclosure. A privileged attacker with a high complexity attack can access data via local access, without user interaction.

In Intel TDX module software before version TDX_1.5.07.00.774, an out-of-bounds read may allow an authenticated user to potentially enable information disclosure via local access.

In Intel TDX module software before version TDX_1.5.01.00.592, incomplete filtering of special elements may allow an authenticated user to potentially enable escalation of privilege via local access.

Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access.

Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.