Intel TDX MigTD: unchecked return value in error handling lets privileged host software crash MigTD

Impact

MigTD's error handling ignores a return value, so privileged host software can push MigTD into a denial of service (high availability impact; no confidentiality or integrity impact). In practice the likely effect is a failed live migration of a confidential VM. A host attacker could already refuse to migrate a VM, so this adds little beyond reliability concerns for TDX fleets.

Who can reach it

Local, high privilege: an attacker who controls host system software on a TDX-enabled host. No user interaction needed.

What to do

Update MigTD as described in Intel advisory INTEL-SA-01580. The record names no fixed version. Fleets that do not use TDX live migration with MigTD are not exposed.

References

Related entries

• Dell OpenManage Enterprise: weak signature check gives a local admin filesystem accessCVE-2026-91905 · Dell OpenManage Enterprise (signature verification on a locally supplied artifact)Medium
• HPE iLO 5 (firmware update security restriction bypass): Bypass of the security restrictions that guard iLO 5 firmwareCVE-2018-7113 · HPE iLO 5 (firmware update security restriction bypass)Medium
• AMI MegaRAC SPx (BMC hard-coded credentials): Hard-coded credentials inside the BMC firmwareCVE-2023-34473 · AMI MegaRAC SPx (BMC hard-coded credentials)Medium
• Cisco FXOS / NX-OS (LLDP frame handling denial of service): An unauthenticated adjacent attacker sends crafted LLDPCVE-2024-20294 · Cisco FXOS / NX-OS (LLDP frame handling denial of service)Medium
• AMD Zynq UltraScale+ - CSU runtime service address validation in PMU firmware: The PMU firmware on Zynq UltraScale+CVE-2025-0038 · AMD Zynq UltraScale+ - CSU runtime service address validation in PMU firmwareMedium
• TCG TPM 2.0 reference implementation (CryptHmacSign): Out-of-bounds read in the reference implementation's HMAC signingCVE-2025-2884 · TCG TPM 2.0 reference implementation (CryptHmacSign)Medium