---
id: "CVE-2026-60139"
page: "https://infrastack.ai/live/CVE-2026-60139"
kind: "vulnerability"
aliases: ["CVE-2026-60139"]
title: "Intel TDX MigTD: SPDM transport flaw lets a neighbor crash the migration trust domain"
severity: "medium"
cvss: 6.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["confidential-computing", "hypervisor", "infrastructure", "intel-tdx", "migtd"]
not_affected_if: ["no-tdx-migration"]
published_at: "2026-11-10T18:17:43+00:00"
first_seen_at: "2026-11-10T18:22:59+00:00"
updated_at: "2026-11-10T18:24:53+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-60139", "first_seen_at": "2026-11-10T18:22:59+00:00"}]
exploit_sources: []
---

# Intel TDX MigTD: SPDM transport flaw lets a neighbor crash the migration trust domain

Link for people: https://infrastack.ai/live/CVE-2026-60139 (this .md is for agents)

Intel's MigTD component, which handles live migration for Intel TDX confidential VMs, does not properly neutralize input on its SPDM transport. A network-adjacent attacker without credentials can cause a denial of service against the migration trust domain.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T18:22:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-60139

## From the sources

Improper neutralization in the MigTD SPDM transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_