{"id":"CVE-2026-61470","kind":"vulnerability","aliases":["CVE-2026-61470"],"related":[],"title":"Intel TDX MigTD: TLS client resource flaw allows denial of service","description":"Improper control of a resource through its lifetime in the MigTD's TLS client for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable data corruption. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"The MigTD component of Intel's TDX Migration Trust Domain has a resource lifetime management flaw in its TLS client. A network attacker without credentials could cause denial of service or data corruption in the migration trust domain.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["confidential-computing","hypervisor","infrastructure","intel-tdx","migtd"],"not_affected_if":["no-tdx-migration"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T18:17:44+00:00","first_seen_at":"2026-11-10T18:23:00+00:00","triaged_at":"2026-11-10T18:26:23+00:00","updated_at":"2026-11-10T18:26:23+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T18:26:23Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Intel TDX MigTD: TLS client resource flaw allows denial of service","impact":"medium","summary":"The MigTD component of Intel's TDX Migration Trust Domain has a resource lifetime management flaw in its TLS client. A network attacker without credentials could cause denial of service or data corruption in the migration trust domain.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel-tdx","confidential-computing","migtd","hypervisor"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Denial of service and limited data corruption in the migration trust domain","analyst_note":"Confirm affected MigTD versions and the fixed release from Intel's security advisory for CVE-2026-61470 (NVD link in sources).","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-tdx-migration"],"who_is_affected":"Intended for teams running Intel TDX confidential VMs with MigTD live migration, within the hypervisor trust boundary. The sources do not describe the exact affected MigTD versions or configuration, so whether a given deployment is exposed is unknown. Teams not using TDX migration are unlikely to be affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000713,"input_tokens":4678,"output_tokens":491,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-61470':14A,17A '0':90C 'access':121C 'adjac':120C 'adversari':99C 'allow':8A,93C 'attack':49B,109C,123C 'avail':148C,163C 'caus':53B 'client':5A,46B,78C 'combin':104C 'complex':108C 'compon':29B 'comput':20B 'confidenti':19B,143C,158C 'confidential-comput':18B 'control':66C 'corrupt':59B,113C 'could':52B 'credenti':51B 'cve':12A,15A 'data':58B,112C 'denial':9A,54B,95C 'domain':36B,64B,86C 'enabl':111C 'flaw':7A,42B 'hypervisor':21B,91C 'impact':141C,165C 'improp':65C 'infrastructur':22B 'integr':145C,160C 'intel':1A,24B,31B,81C 'intel-tdx':23B 'interact':136C 'intern':130C 'knowledg':131C 'lifetim':40B,72C 'low':107C,146C,149C 'manag':41B 'may':92C,110C,116C,140C 'migrat':34B,62B,84C 'migtd':3A,26B,28B,75C,87C 'network':48B,98C 'none':144C,159C,161C,164C 'occur':118C 'potenti':117C,138C 'present':127C 'r':82C 'requir':124C,133C 'resourc':6A,39B,69C 'result':115C,154C 'ring':89C 'servic':11A,56B,97C 'special':129C 'subsequ':156C 'system':153C,157C 'tdx':2A,25B,33B,83C 'tls':4A,45B,77C 'trust':35B,63B,85C 'unauthent':102C 'user':103C,135C 'via':119C 'vulner':139C,152C 'within':88C 'without':50B,128C","nicknames":[],"mitigations":[],"who_affected":"Intended for teams running Intel TDX confidential VMs with MigTD live migration, within the hypervisor trust boundary. The sources do not describe the exact affected MigTD versions or configuration, so whether a given deployment is exposed is unknown. Teams not using TDX migration are unlikely to be affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["confidentialcomputing","hypervisor","infrastructure","inteltdx","medium","migtd"],"campaign_type":null,"search_a":"'-2026':13A,16A '-61470':14A,17A 'allow':8A 'client':5A 'cve':12A,15A 'denial':9A 'flaw':7A 'intel':1A 'migtd':3A 'resourc':6A 'servic':11A 'tdx':2A 'tls':4A","search_b":"'attack':49B 'caus':53B 'client':46B 'compon':29B 'comput':20B 'confidenti':19B 'confidential-comput':18B 'corrupt':59B 'could':52B 'credenti':51B 'data':58B 'denial':54B 'domain':36B,64B 'flaw':42B 'hypervisor':21B 'infrastructur':22B 'intel':24B,31B 'intel-tdx':23B 'lifetim':40B 'manag':41B 'migrat':34B,62B 'migtd':26B,28B 'network':48B 'resourc':39B 'servic':56B 'tdx':25B,33B 'tls':45B 'trust':35B,63B 'without':50B","search_c":"'0':90C 'access':121C 'adjac':120C 'adversari':99C 'allow':93C 'attack':109C,123C 'avail':148C,163C 'client':78C 'combin':104C 'complex':108C 'confidenti':143C,158C 'control':66C 'corrupt':113C 'data':112C 'denial':95C 'domain':86C 'enabl':111C 'hypervisor':91C 'impact':141C,165C 'improp':65C 'integr':145C,160C 'intel':81C 'interact':136C 'intern':130C 'knowledg':131C 'lifetim':72C 'low':107C,146C,149C 'may':92C,110C,116C,140C 'migrat':84C 'migtd':75C,87C 'network':98C 'none':144C,159C,161C,164C 'occur':118C 'potenti':117C,138C 'present':127C 'r':82C 'requir':124C,133C 'resourc':69C 'result':115C,154C 'ring':89C 'servic':97C 'special':129C 'subsequ':156C 'system':153C,157C 'tdx':83C 'tls':77C 'trust':85C 'unauthent':102C 'user':103C,135C 'via':119C 'vulner':139C,152C 'within':88C 'without':128C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T18:17:44+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-61470","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61470","severity":null,"published_at":"2026-11-10T18:17:44+00:00","modified_at":"2026-11-10T18:17:44+00:00","first_seen_at":"2026-11-10T18:23:00+00:00","fetched_at":"2026-11-10T18:23:00+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}