CVE-2025-31356
MediumCVSS 5.6Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Insufficient verification of data authenticity in Intel Trust Domain Extensions (Intel TDX) at Ring 0 (hypervisor) may allow information disclosure. A system software adversary with privileged user access and a high complexity attack can expose data without user interaction. The vulnerability impacts confidentiality (high) and integrity (low) but not availability.
Risk Assessment
Risk of data exposure in environments using Intel TDX, potentially compromising confidentiality and integrity. The attack requires privileged access and complex conditions, limiting exploitability.
Recommendation
Apply microcode or firmware updates from Intel. Monitor Intel security advisories and deploy patches on systems with Intel TDX.
Original NVD description (English source)
Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without any user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and no effect on availability. Subsequent system impacts include reduced confidentiality (low), integrity (low), and no effect on availability.