Intel TDX module: uncaught exception lets privileged host software deny service to trust domains

CVE-2026-20775Firmware, BMC & network fabriccurated

Impact

An uncaught exception in the TDX module can be triggered by privileged host software, producing high availability impact on the vulnerable system and on the trust domains it hosts. On a confidential-computing GPU node this means every tenant TD on that host goes down together, and recovery is a node-level event rather than a per-VM restart. The practical exposure is a host-side stability and blast-radius problem: one privileged fault takes out the whole confidential workload set on the box. Intel rates the attack high complexity and it requires privileged local access, so it is not a path an ordinary tenant can reach.

Who can reach it

Local, from privileged system software on the host (Ring 0 / VMM level). No remote or unauthenticated path.

What to do

Apply the updated Intel TDX module per Intel SA-01436, the same advisory that covers CVE-2026-20705 - fix both in one maintenance window. Delivery is through Intel/OEM platform firmware channels: drain trust domains, apply the update, reboot the node. Intel's advisory is the authority on the fixed module version and the exact affected Xeon SKUs.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-20775 https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01436.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.