{"id":"CVE-2026-60133","kind":"vulnerability","aliases":["CVE-2026-60133"],"related":[],"title":"Intel TDX MigTD vsock integer overflow lets local users crash the hypervisor","description":"Integer overflow in the MigTD vsock for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"An integer overflow in the vsock component of Intel's MigTD migration trust domain can be triggered by an authenticated local user. The result is a denial of service against the system.","severity":"medium","cvss":5.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["confidential-computing","hypervisor","infrastructure","intel-tdx","migtd"],"not_affected_if":["no-migtd","no-tdx"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T18:17:43+00:00","first_seen_at":"2026-11-10T18:22:59+00:00","triaged_at":"2026-11-10T18:25:01+00:00","updated_at":"2026-11-10T18:25:01+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T18:25:01Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel TDX MigTD vsock integer overflow lets local users crash the hypervisor","impact":"low","summary":"An integer overflow in the vsock component of Intel's MigTD migration trust domain can be triggered by an authenticated local user. The result is a denial of service against the system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel-tdx","migtd","hypervisor","confidential-computing"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local authenticated user crashes the trust domain, denying service","analyst_note":"Check Intel's security advisory for affected MigTD versions and the fixed release; NVD entry alone gives no versions or fix.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-tdx","no-migtd"],"who_is_affected":"Affects Intel TDX deployments that use the MigTD migration trust domain with its vsock component. The sources do not name affected versions or say whether a default configuration is exposed. Teams not running Intel TDX live migration can likely skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000692,"input_tokens":4680,"output_tokens":448,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-60133':15A,18A '0':77C 'access':110C 'adversari':87C 'allow':80C 'attack':97C,112C 'authent':47B,90C 'avail':137C,152C 'combin':92C 'complex':96C 'compon':34B 'comput':21B 'confidenti':20B,132C,147C 'confidential-comput':19B 'crash':10A 'cve':13A,16A 'denial':54B,82C,100C 'domain':41B,73C 'enabl':99C 'high':95C,138C 'hypervisor':12A,22B,78C 'impact':130C,154C 'infrastructur':23B 'integ':5A,29B,60C 'integr':134C,149C 'intel':1A,25B,36B,68C 'intel-tdx':24B 'interact':125C 'intern':119C 'knowledg':120C 'let':7A 'local':8A,48B,109C 'low':135C 'may':79C,98C,105C,129C 'migrat':39B,71C 'migtd':3A,27B,38B,64C,74C 'none':133C,148C,150C,153C 'occur':107C 'overflow':6A,30B,61C 'potenti':106C,127C 'present':116C 'r':69C 'requir':113C,122C 'result':51B,104C,143C 'ring':76C 'servic':56B,84C,102C 'softwar':86C 'special':118C 'subsequ':145C 'system':59B,142C,146C 'tdx':2A,26B,70C 'trigger':44B 'trust':40B,72C 'unprivileg':85C 'user':9A,49B,91C,124C 'via':108C 'vsock':4A,33B,65C 'vulner':128C,141C 'within':75C 'without':117C","nicknames":[],"mitigations":[],"who_affected":"Affects Intel TDX deployments that use the MigTD migration trust domain with its vsock component. The sources do not name affected versions or say whether a default configuration is exposed. Teams not running Intel TDX live migration can likely skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["confidentialcomputing","hypervisor","infrastructure","inteltdx","medium","migtd"],"campaign_type":null,"search_a":"'-2026':14A,17A '-60133':15A,18A 'crash':10A 'cve':13A,16A 'hypervisor':12A 'integ':5A 'intel':1A 'let':7A 'local':8A 'migtd':3A 'overflow':6A 'tdx':2A 'user':9A 'vsock':4A","search_b":"'authent':47B 'compon':34B 'comput':21B 'confidenti':20B 'confidential-comput':19B 'denial':54B 'domain':41B 'hypervisor':22B 'infrastructur':23B 'integ':29B 'intel':25B,36B 'intel-tdx':24B 'local':48B 'migrat':39B 'migtd':27B,38B 'overflow':30B 'result':51B 'servic':56B 'system':59B 'tdx':26B 'trigger':44B 'trust':40B 'user':49B 'vsock':33B","search_c":"'0':77C 'access':110C 'adversari':87C 'allow':80C 'attack':97C,112C 'authent':90C 'avail':137C,152C 'combin':92C 'complex':96C 'confidenti':132C,147C 'denial':82C,100C 'domain':73C 'enabl':99C 'high':95C,138C 'hypervisor':78C 'impact':130C,154C 'integ':60C 'integr':134C,149C 'intel':68C 'interact':125C 'intern':119C 'knowledg':120C 'local':109C 'low':135C 'may':79C,98C,105C,129C 'migrat':71C 'migtd':64C,74C 'none':133C,148C,150C,153C 'occur':107C 'overflow':61C 'potenti':106C,127C 'present':116C 'r':69C 'requir':113C,122C 'result':104C,143C 'ring':76C 'servic':84C,102C 'softwar':86C 'special':118C 'subsequ':145C 'system':142C,146C 'tdx':70C 'trust':72C 'unprivileg':85C 'user':91C,124C 'via':108C 'vsock':65C 'vulner':128C,141C 'within':75C 'without':117C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T18:17:43+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-60133","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60133","severity":null,"published_at":"2026-11-10T18:17:43+00:00","modified_at":"2026-11-10T18:17:43+00:00","first_seen_at":"2026-11-10T18:22:59+00:00","fetched_at":"2026-11-10T18:22:59+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}