Intel TDX Module Information Disclosure Vulnerability

A vulnerability exists in some Intel Trust Domain Extensions (TDX) modules prior to version 1.5 within Ring 0: Hypervisor. This vulnerability involves the use of an uninitialized variable, which may lead to unauthorized information disclosure. An authorized adversary with a privileged user status could exploit this vulnerability through a complex, high-effort attack, potentially allowing data exposure via local access. The attack requires no user interaction and could be executed without special internal knowledge.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure, allowing sensitive data to be exposed.

Remediation

Intel recommends that users of affected Intel Xeon processors update to the latest version provided by their system manufacturer that addresses this vulnerability.