Intel TDX MigTD: coarse access control in the v2 policy engine allows privilege escalation

CVSS 8.8CVE-2026-57892Firmware, BMC & network fabriccurated

Impact

The MigTD v2 policy engine decides whether a peer platform may receive a migrating TD. Its access control is not fine-grained enough, so an unauthenticated adjacent-network adversary may escalate privilege. Intel rates the attack as high complexity, with high confidentiality and integrity impact on MigTD and on the systems that depend on it. If the policy is bypassed, a TD could be migrated to a platform that should have been refused, which weakens tenant confidentiality on a TDX fleet. Only hosts that use MigTD for live migration are affected.

Who can reach it

An unauthenticated adversary on the adjacent network that carries MigTD migration traffic. High complexity, no user interaction.

What to do

Apply the MigTD update named in Intel advisory INTEL-SA-01580. The record does not give a fixed version. Until it is patched, keep migration traffic on an isolated, trusted segment. Rollout cost depends on how your VMM stack deploys the MigTD image.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-57892 https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.