Intel TDX MigTDの更新、重大な脆弱性に修正版
Summary
Intel TDXの移行用トラストドメイン MigTDで、認証の不備から権限昇格やコード実行に至る重大な脆弱性3件を含む更新が公開されました。TDXで仮想マシンを運用する事業者や部門は、Intelの勧告で対象を確認し、更新を早めに適用してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
Intel TDXの移行用トラストドメイン MigTDで、認証の不備から権限昇格やコード実行に至る重大な脆弱性3件を含む更新が公開されました。TDXで仮想マシンを運用する事業者や部門は、Intelの勧告で対象を確認し、更新を早めに適用してください。
Original description The description as published by the source.
Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. Network adversary with an unauthenticated user combined with a low complexity attack may enable remote code execution. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web secure@intel.com
- web nvd.nist.gov
- web github.com