{"id":"CVE-2026-40693","kind":"vulnerability","aliases":["CVE-2026-40693"],"related":[],"title":"Intel TDX Workload Attestation: local user code can cause denial of service","description":"Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Some Intel TDX Workload Attestation software accepts unvalidated input from user-mode applications running in Ring 3. A local, authenticated attacker with low privileges can make the system unavailable, but cannot read or change data.","severity":"medium","cvss":5.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["confidential-computing","infrastructure","intel-tdx","linux"],"not_affected_if":["no-local-users","no-tdx"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T17:17:42+00:00","first_seen_at":"2026-11-10T17:22:43+00:00","triaged_at":"2026-11-10T17:24:19+00:00","updated_at":"2026-11-10T17:24:19+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T17:24:19Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel TDX Workload Attestation: local user code can cause denial of service","impact":"low","summary":"Some Intel TDX Workload Attestation software accepts unvalidated input from user-mode applications running in Ring 3. A local, authenticated attacker with low privileges can make the system unavailable, but cannot read or change data.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel-tdx","confidential-computing","linux"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user code crashes the attestation service or host","analyst_note":"Find Intel's security advisory for this CVE to get affected product versions, fixed versions and detection steps; NVD text alone does not give them.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-users","no-tdx"],"who_is_affected":"Systems running Intel TDX confidential computing with Workload Attestation software installed. Exposure requires a local account on the machine, and the attack needs conditions the sources do not describe. Systems without TDX attestation software, or without local untrusted users, can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000695,"input_tokens":4644,"output_tokens":461,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-40693':15A,18A '3':44B,76C 'accept':33B 'access':110C 'adversari':87C 'allow':80C 'applic':40B,78C 'attack':48B,97C,112C 'attest':4A,31B,72C 'authent':47B,90C 'avail':136C,151C 'cannot':58B 'caus':9A 'chang':61B 'code':7A 'combin':92C 'complex':96C 'comput':21B 'confidenti':20B,131C,146C 'confidential-comput':19B 'cve':13A,16A 'data':62B 'denial':10A,82C,100C 'enabl':99C 'high':95C,137C 'impact':129C,153C 'improp':63C 'infrastructur':22B 'input':35B,64C 'integr':133C,148C 'intel':1A,24B,28B,68C 'intel-tdx':23B 'interact':124C 'intern':118C 'knowledg':119C 'linux':26B 'local':5A,46B,109C 'low':50B 'make':53B 'may':79C,98C,105C,128C 'mode':39B 'none':132C,134C,147C,149C,152C 'occur':107C 'potenti':106C,126C 'present':115C 'privileg':51B 'r':69C 'read':59B 'requir':113C,121C 'result':104C,142C 'ring':43B,75C 'run':41B 'servic':12A,84C,102C 'softwar':32B,73C,86C 'special':117C 'subsequ':144C 'system':55B,141C,145C 'tdx':2A,25B,29B,70C 'unavail':56B 'unprivileg':85C 'unvalid':34B 'user':6A,38B,77C,91C,123C 'user-mod':37B 'valid':65C 'via':108C 'vulner':127C,140C 'within':74C 'without':116C 'workload':3A,30B,71C","nicknames":[],"mitigations":[],"who_affected":"Systems running Intel TDX confidential computing with Workload Attestation software installed. Exposure requires a local account on the machine, and the attack needs conditions the sources do not describe. Systems without TDX attestation software, or without local untrusted users, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["confidentialcomputing","infrastructure","inteltdx","linux","medium"],"campaign_type":null,"search_a":"'-2026':14A,17A '-40693':15A,18A 'attest':4A 'caus':9A 'code':7A 'cve':13A,16A 'denial':10A 'intel':1A 'local':5A 'servic':12A 'tdx':2A 'user':6A 'workload':3A","search_b":"'3':44B 'accept':33B 'applic':40B 'attack':48B 'attest':31B 'authent':47B 'cannot':58B 'chang':61B 'comput':21B 'confidenti':20B 'confidential-comput':19B 'data':62B 'infrastructur':22B 'input':35B 'intel':24B,28B 'intel-tdx':23B 'linux':26B 'local':46B 'low':50B 'make':53B 'mode':39B 'privileg':51B 'read':59B 'ring':43B 'run':41B 'softwar':32B 'system':55B 'tdx':25B,29B 'unavail':56B 'unvalid':34B 'user':38B 'user-mod':37B 'workload':30B","search_c":"'3':76C 'access':110C 'adversari':87C 'allow':80C 'applic':78C 'attack':97C,112C 'attest':72C 'authent':90C 'avail':136C,151C 'combin':92C 'complex':96C 'confidenti':131C,146C 'denial':82C,100C 'enabl':99C 'high':95C,137C 'impact':129C,153C 'improp':63C 'input':64C 'integr':133C,148C 'intel':68C 'interact':124C 'intern':118C 'knowledg':119C 'local':109C 'may':79C,98C,105C,128C 'none':132C,134C,147C,149C,152C 'occur':107C 'potenti':106C,126C 'present':115C 'r':69C 'requir':113C,121C 'result':104C,142C 'ring':75C 'servic':84C,102C 'softwar':73C,86C 'special':117C 'subsequ':144C 'system':141C,145C 'tdx':70C 'unprivileg':85C 'user':77C,91C,123C 'valid':65C 'via':108C 'vulner':127C,140C 'within':74C 'without':116C 'workload':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:42+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-40693","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40693","severity":null,"published_at":"2026-11-10T17:17:42+00:00","modified_at":"2026-11-10T17:17:42+00:00","first_seen_at":"2026-11-10T17:22:43+00:00","fetched_at":"2026-11-10T17:22:43+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}