Intel TDX Vulnerabilities: Intel-SA-01436 Advisory for Privilege Escalation, Info Disclosure, and Denial of Service

Vulnerability Overview Intel has released security information regarding the 2026.3 IPU and Intel® Trust Domain Extensions (Intel® TDX) modules. This security advisory (INTEL-SA-01436) indicates that certain Intel TDX modules contain potential security vulnerabilities that could lead to information disclosure, privilege escalation, or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Scope of Impact Vulnerability Details 1. CVE-2026-20885 - Description: In the Intel TDX module, certain Intel platforms within Ring 0: Trust Domain may contain vulnerabilities leading to information disclosure and privilege escalation. A system software attacker, combined with a privileged user, may achieve privilege escalation via a high-complexity attack. This vulnerability may occur through local access and does not require special internal knowledge or user interaction. The potential impact on confidentiality (High), integrity (High), and availability (None) may result in subsequent impacts on system confidentiality (Low), integrity (Low), and availability (None). - CVSS Base Score: 7.0 High - CVSS Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/V:C/V:H/VA:N/SC:L/SI:L/SA:N 2. CVE-2026-20775 - Description: Certain Intel TDX modules within Ring 0: Trust Domain may contain a denial of service vulnerability. A system software attacker, combined with a privileged user, may cause data exposure via a high-complexity attack. This vulnerability may occur through local access and does not require special internal knowledge or user interaction. The potential impact on confidentiality (None), integrity (None), and availability (High) may result in subsequent impacts on system confidentiality (None), integrity (None), and availability (High). - CVSS Base Score: 6.8 Medium - CVSS Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H 3. CVE-2026-20705 - Description: In the Intel TDX module, certain Intel platforms within Ring 0: Trust Domain may contain a vulnerability involving insecure storage of sensitive information. A system software attacker, combined with a privileged user, may cause data exposure via a high-complexity attack. This vulnerability may occur through local access and does not require special internal knowledge or user interaction. The potential impact on confidentiality (High), integrity (None), and availability (None) may result in subsequent impacts on system confidentiality (High), integrity (None), and availability (None). - CVSS Base Score: 6.8 Medium - CVSS Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N Affected Products 4th Gen Intel® Xeon® Scalable processor: Version 1.5.28 and earlier 5th Gen Intel® Xeon® Scalable processor: Version 1.5.28 and earlier Intel® Xeon® 6 processor with P-cores: Version 2.0.16 and earlier Intel® Xeon® 6 SoC: Version 2.0.16 and earlier Remediation Intel recommends that users update the Intel TDX module to the latest version provided by the system manufacturer to resolve these issues. Additional Information Release Date: August 11, 2026 Last Revised Date: August 11, 2026 Severity Rating: High Vulnerability Impact Category: Privilege escalation, denial of service, information disclosure Legal Notice and Disclaimer Materials provided by Intel are provided "as is" without warranties of any kind, either express or implied. All products, dates, and specifications are based on current expectations and are subject to change without notice. Intel products may contain known design flaws or errors that could cause them to deviate from published specifications. Intel recommends that users consult system manufacturers or retailers for further information. Reporting Vulnerabilities If you have information regarding security issues or vulnerabilities related to Intel-branded products or technologies, please submit a report via the Intigriti platform. All vulnerability reports must be submitted through Intigriti. Need Product Support? If you have questions regarding Intel product security features, require technical support, or wish to obtain product updates or patches, please visit the Support & Downloads page.

Goal Reached Thanks to every supporter — we hit 100%!

Intel TDX Vulnerabilities: Intel-SA-01436 Advisory for Privilege Escalation, Info Disclosure, and Denial of Service