Intel TDX MigTD: replayed messages let privileged host software bypass authentication

CVSS 9.2CVE-2026-61473Firmware, BMC & network fabriccurated

Impact

MigTD can be fooled by replayed messages, so privileged system software can bypass authentication and escalate privilege. Intel rates confidentiality and integrity impact as high on MigTD and on the systems that depend on it. Availability is not affected. In a TDX deployment the host is the party tenants are protected from, so this undermines the confidentiality and integrity of TDs during migration. Only hosts that use MigTD for TD live migration are affected.

Who can reach it

Local privileged system software on the TDX host (VMM or host root). Low complexity, no user interaction.

What to do

Apply the MigTD update named in Intel advisory INTEL-SA-01580. The record does not give a fixed version. Rollout cost depends on how your VMM stack deploys the MigTD image. Check with your platform or hypervisor vendor.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-61473 https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.