Intel TDX MigTD: improper cleanup after an exception in the SPDM responder leaks data over the network

CVSS 8.7CVE-2026-57890Firmware, BMC & network fabriccurated

Impact

When the MigTD SPDM responder hits an exception, it does not clean up properly and can expose data to an unauthenticated network adversary. Intel rates confidentiality impact on MigTD as high, and integrity and availability impact as none. The record does not say what data leaks. Because MigTD handles migration keys and attestation material, operators running TDX live migration should treat this as a potential exposure of secrets that protect tenant TDs.

Who can reach it

An unauthenticated adversary who can reach the MigTD SPDM responder over the network. Low complexity, no user interaction.

What to do

Apply the MigTD update named in Intel advisory INTEL-SA-01580. The record does not give a fixed version. Until it is patched, restrict network reachability of the migration and SPDM channel. Rollout cost depends on how your VMM stack deploys the MigTD image.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-57890 https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.