CVE-2026-20775
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Uncaught exception in some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. The attack requires a privileged user, high complexity, and local access, with no user interaction. The vulnerability impacts availability (high), but not confidentiality or integrity.
Risk Assessment
Denial of service may disrupt environments based on Intel TDX technology, potentially affecting the availability of critical workloads. System privileges are required, which limits the risk, but it remains a threat.
Recommendation
It is recommended to update Intel TDX modules to a patched version. Also, restrict access to systems with administrator privileges and monitor events related to TDX modules.
Original NVD description (English source)
Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.