Intel TDX MigTD: improper validation of PCI BAR input lets privileged host software corrupt data

CVSS 6.7CVE-2026-56759Firmware, BMC & network fabriccurated

Impact

MigTD is the service trust domain that moves TDX confidential VMs between hosts during live migration. It does not validate PCI BAR input properly, so privileged system software on the host can corrupt data inside MigTD (high integrity impact; no confidentiality or availability impact listed). TDX is supposed to protect tenants from the host, so this weakens that promise for tenants whose confidential VMs get migrated. The record does not say what data can be corrupted or whether migrated TD state is affected.

Who can reach it

Local, high privilege: an attacker who controls host system software (hypervisor/VMM level) on a TDX-enabled host. No user interaction needed.

What to do

Update MigTD as described in Intel advisory INTEL-SA-01580. The record names no fixed version. Fleets that do not use TDX live migration with MigTD are not exposed.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-56759 https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.