{"id":"CVE-2026-62920","kind":"vulnerability","aliases":["CVE-2026-62920"],"related":[],"title":"Intel TDX MigTD: unchecked return value lets a privileged user deny service","description":"Unchecked return value in the MigTD error handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"The Intel TDX Migration Trust Domain (MigTD) error handling ignores a function's return value, so a privileged system-software user can trigger a denial of service. The impact is availability only, with no confidentiality or integrity loss.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["hypervisor","infrastructure","intel-tdx","migtd"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T18:17:45+00:00","first_seen_at":"2026-11-10T18:23:00+00:00","triaged_at":"2026-11-10T18:24:45+00:00","updated_at":"2026-11-10T18:24:45+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T18:24:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel TDX MigTD: unchecked return value lets a privileged user deny service","impact":"low","summary":"The Intel TDX Migration Trust Domain (MigTD) error handling ignores a function's return value, so a privileged system-software user can trigger a denial of service. The impact is availability only, with no confidentiality or integrity loss.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel-tdx","migtd","hypervisor"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Denial of service on the trust domain via a privileged local user","analyst_note":"Check the Intel security advisory for affected MigTD versions and the fixed release; the NVD entry gives no product ranges.","how_to_check":"- unknown","plain_action":"","product_name":"Intel TDX MigTD","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Affects hosts running Intel TDX with the MigTD migration component inside Ring 0 hypervisor-level software. The sources do not say which MigTD versions or configurations are affected, and who can skip it is unknown.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000702,"input_tokens":4667,"output_tokens":470,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-62920':15A,18A '0':83C 'access':116C 'adversari':93C 'allow':86C 'attack':103C,118C 'avail':56B,143C,158C 'combin':98C 'complex':102C 'confidenti':60B,138C,153C 'cve':13A,16A 'deni':11A 'denial':50B,88C,106C 'domain':30B,79C 'enabl':105C 'error':32B,70C 'function':36B 'handl':33B,71C 'high':144C 'hypervisor':19B,84C 'ignor':34B 'impact':54B,136C,160C 'infrastructur':20B 'integr':62B,140C,155C 'intel':1A,22B,26B,74C 'intel-tdx':21B 'interact':131C 'intern':125C 'knowledg':126C 'let':7A 'local':115C 'loss':63B 'low':101C 'may':85C,104C,111C,135C 'migrat':28B,77C 'migtd':3A,24B,31B,69C,80C 'none':139C,141C,154C,156C,159C 'occur':113C 'potenti':112C,133C 'present':122C 'privileg':9A,42B,96C 'r':75C 'requir':119C,128C 'result':110C,149C 'return':5A,38B,65C 'ring':82C 'servic':12A,52B,90C,108C 'softwar':45B,92C 'special':124C 'subsequ':151C 'system':44B,91C,148C,152C 'system-softwar':43B 'tdx':2A,23B,27B,76C 'trigger':48B 'trust':29B,78C 'uncheck':4A,64C 'user':10A,46B,97C,130C 'valu':6A,39B,66C 'via':114C 'vulner':134C,147C 'within':81C 'without':123C","nicknames":[],"mitigations":[],"who_affected":"Affects hosts running Intel TDX with the MigTD migration component inside Ring 0 hypervisor-level software. The sources do not say which MigTD versions or configurations are affected, and who can skip it is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["hypervisor","infrastructure","inteltdx","medium","migtd"],"campaign_type":null,"search_a":"'-2026':14A,17A '-62920':15A,18A 'cve':13A,16A 'deni':11A 'intel':1A 'let':7A 'migtd':3A 'privileg':9A 'return':5A 'servic':12A 'tdx':2A 'uncheck':4A 'user':10A 'valu':6A","search_b":"'avail':56B 'confidenti':60B 'denial':50B 'domain':30B 'error':32B 'function':36B 'handl':33B 'hypervisor':19B 'ignor':34B 'impact':54B 'infrastructur':20B 'integr':62B 'intel':22B,26B 'intel-tdx':21B 'loss':63B 'migrat':28B 'migtd':24B,31B 'privileg':42B 'return':38B 'servic':52B 'softwar':45B 'system':44B 'system-softwar':43B 'tdx':23B,27B 'trigger':48B 'trust':29B 'user':46B 'valu':39B","search_c":"'0':83C 'access':116C 'adversari':93C 'allow':86C 'attack':103C,118C 'avail':143C,158C 'combin':98C 'complex':102C 'confidenti':138C,153C 'denial':88C,106C 'domain':79C 'enabl':105C 'error':70C 'handl':71C 'high':144C 'hypervisor':84C 'impact':136C,160C 'integr':140C,155C 'intel':74C 'interact':131C 'intern':125C 'knowledg':126C 'local':115C 'low':101C 'may':85C,104C,111C,135C 'migrat':77C 'migtd':69C,80C 'none':139C,141C,154C,156C,159C 'occur':113C 'potenti':112C,133C 'present':122C 'privileg':96C 'r':75C 'requir':119C,128C 'result':110C,149C 'return':65C 'ring':82C 'servic':90C,108C 'softwar':92C 'special':124C 'subsequ':151C 'system':91C,148C,152C 'tdx':76C 'trust':78C 'uncheck':64C 'user':97C,130C 'valu':66C 'via':114C 'vulner':134C,147C 'within':81C 'without':123C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T18:17:45+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-62920","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62920","severity":null,"published_at":"2026-11-10T18:17:45+00:00","modified_at":"2026-11-10T18:17:45+00:00","first_seen_at":"2026-11-10T18:23:00+00:00","fetched_at":"2026-11-10T18:23:00+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}