---
id: "CVE-2026-60142"
page: "https://infrastack.ai/live/CVE-2026-60142"
kind: "vulnerability"
aliases: ["CVE-2026-60142"]
title: "Intel TDX MigTD: write-what-where flaw lets a privileged local user escalate"
severity: "high"
cvss: 8.4
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Intel TDX Migration Trust Domain (MigTD) reference software", "fixed": ["0.7.2"], "affected": "< 0.7.2", "ecosystem": "vendor"}]
ecosystems: []
tags: ["confidential-computing", "hypervisor", "infrastructure", "intel", "local", "migtd", "tdx"]
not_affected_if: ["no-tdx-migration"]
published_at: "2026-11-10T18:17:43+00:00"
first_seen_at: "2026-11-10T18:23:00+00:00"
updated_at: "2026-11-10T18:26:01+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-60142", "first_seen_at": "2026-11-10T18:23:00+00:00"}, {"source": "analyst", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", "first_seen_at": "2026-11-10T18:26:01+00:00", "cites": ["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html"]}]
exploit_sources: []
---

# Intel TDX MigTD: write-what-where flaw lets a privileged local user escalate

Link for people: https://infrastack.ai/live/CVE-2026-60142 (this .md is for agents)

Intel's MigTD component for TDX Migration Trust Domains has a write-what-where memory flaw that a privileged local adversary can use to escalate privilege. The sources say it can also lead to information disclosure and loss of integrity and availability on the affected system.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Intel TDX Migration Trust Domain (MigTD) reference software affected < 0.7.2 fixed 0.7.2

## How to check

Check the MigTD reference software version your TDX migration setup builds or ships; versions before 0.7.2 are affected. If you get MigTD from your platform or cloud vendor, ask them for the MigTD version or their INTEL-SA-01580 status. Skip this if you do not use TDX live migration.

## Fix

Update Intel TDX Migration Trust Domain (MigTD) reference software to version 0.7.2 or later.

## Timeline

- 2026-11-10T18:23:00+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-60142
- 2026-11-10T18:26:01+00:00 analyst https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html — Intel INTEL-SA-01580 (11/10/2026, advisory rated Medium; this CVE CVSS 4.0 8.4 High, AV:L PR:H): affected MigTD < 0.7.2, fixed 0.7.2. No workarounds section seen, no exploitation or PoC found. Advisory read via WebFetch summary for the tail section; the web-cli text was truncated.

## Documents

- [advisory] INTEL-SA-01580 Intel TDX Migration Trust Domain (MigTD) Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html

## From the sources

Write-what-where condition in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_