Intel TDX MigTD: confused deputy in MigTD signing lets privileged host software escalate privilege

CVSS 8.2CVE-2026-56432Firmware, BMC & network fabriccurated

Impact

MigTD's signing function can be used as a confused deputy, so privileged host software can get MigTD to sign on its behalf and escalate privilege. Intel rates integrity impact on MigTD as high, and confidentiality and integrity impact on the systems that depend on it as high. A signature the host should not be able to get could let it pass as trusted in migration or attestation flows, which weakens tenant TD protections on a TDX fleet.

Who can reach it

Local privileged system software on the TDX host (VMM or host root). Low complexity, no user interaction.

What to do

Apply the MigTD update named in Intel advisory INTEL-SA-01580. The record does not give a fixed version. Rollout cost depends on how your VMM stack deploys the MigTD image.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-56432 https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.