---
id: "CVE-2026-61467"
page: "https://infrastack.ai/live/CVE-2026-61467"
kind: "vulnerability"
aliases: ["CVE-2026-61467"]
title: "Intel TDX MigTD: use-after-free in virtio driver allows privilege escalation"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "MigTD", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["confidential-computing", "infrastructure", "intel-tdx", "migtd", "virtualization"]
not_affected_if: ["no-intel-tdx"]
published_at: "2026-11-10T18:17:44+00:00"
first_seen_at: "2026-11-10T18:23:00+00:00"
updated_at: "2026-11-10T18:24:38+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61467", "first_seen_at": "2026-11-10T18:23:00+00:00"}]
exploit_sources: []
---

# Intel TDX MigTD: use-after-free in virtio driver allows privilege escalation

Link for people: https://infrastack.ai/live/CVE-2026-61467 (this .md is for agents)

A use-after-free bug in the virtio driver of Intel's TDX Migration Trust Domain (MigTD) can corrupt data and may let a privileged local user escalate privileges. The sources describe the impact as high integrity loss and low availability loss, with no confidentiality impact.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:MigTD affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T18:23:00+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-61467

## From the sources

Use after free in the MigTD virtio driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_