Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9gjv-4x58-j6r8

Опубликовано: 10 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.6
CVSS3: 5.3

Описание

Race condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

Race condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

EPSS

Процентиль: 0%
0.00074
Низкий

5.6 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 5.3
nvd
5 месяцев назад

Race condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

CVSS3: 5.3
fstec
5 месяцев назад

Уязвимость модуля Intel Trust Domain Extensions(TDX) микропрограммного обеспечения процессоров Intel, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 0%
0.00074
Низкий

5.6 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-362