CVE-2026-20885
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Improper authentication in the Intel(R) TDX module for some Intel platforms within Ring 0: Trust Domain may allow information disclosure and privilege escalation. A privileged user with a high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are high, availability low.
Risk Assessment
Information disclosure and privilege escalation could lead to breaches of confidentiality and integrity in trusted environments.
Recommendation
Update the Intel TDX module and platform firmware, and restrict access to trusted environments.
Other vulnerabilities in Intel TDX module
See all- CVE-2026-20705Medium
Insecure storage of sensitive information in Intel TDX module for some Intel platforms (Ring 0) may allow information disclosure. A privileged attacker with a high complexity attack can access data via local access, without user interaction.
- CVE-2024-33607Medium
In Intel TDX module software before version TDX_1.5.07.00.774, an out-of-bounds read may allow an authenticated user to potentially enable information disclosure via local access.
- CVE-2024-39283Medium
In Intel TDX module software before version TDX_1.5.01.00.592, incomplete filtering of special elements may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-21801High
Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access.
- CVE-2023-47855Medium
In Intel TDX module software before version 1.5.05.46.698, improper input validation may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2023-45745High
Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.
Original NVD description (English source)
Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS