---
id: "CVE-2026-62929"
page: "https://infrastack.ai/live/CVE-2026-62929"
kind: "vulnerability"
aliases: ["CVE-2026-62929"]
title: "Intel TDX MigTD: expired pointer dereference lets a privileged attacker escalate"
severity: "high"
cvss: 8.4
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Intel TDX Migration TD (MigTD) reference software", "fixed": ["0.7.2"], "affected": "< 0.7.2", "ecosystem": "vendor"}]
ecosystems: []
tags: ["confidential-computing", "infrastructure", "intel-tdx", "virtualization"]
not_affected_if: ["no-td-migration", "no-tdx"]
published_at: "2026-11-10T18:17:45+00:00"
first_seen_at: "2026-11-10T18:23:00+00:00"
updated_at: "2026-11-10T18:26:01+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62929", "first_seen_at": "2026-11-10T18:23:00+00:00"}, {"source": "analyst", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", "first_seen_at": "2026-11-10T18:26:01+00:00", "cites": ["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", "https://github.com/intel/MigTD/releases/tag/v0.7.2"]}]
exploit_sources: []
---

# Intel TDX MigTD: expired pointer dereference lets a privileged attacker escalate

Link for people: https://infrastack.ai/live/CVE-2026-62929 (this .md is for agents)

The virtio-vsock implementation in Intel's TDX Migration Trust Domain (MigTD) dereferences an expired pointer. A privileged system-software attacker on the host can escalate privilege and read or change data inside the trust domain.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Intel TDX Migration TD (MigTD) reference software affected < 0.7.2 fixed 0.7.2

## How to check

Check the MigTD build you deploy for live migration of TDX trust domains: any MigTD reference software version before 0.7.2 is affected per INTEL-SA-01580. Rebuild or redeploy from v0.7.2 or later.

## Fix

Update Intel TDX Migration TD (MigTD) reference software to v0.7.2 or later (https://github.com/intel/MigTD/releases/tag/v0.7.2).

## Timeline

- 2026-11-10T18:23:00+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-62929
- 2026-11-10T18:26:01+00:00 analyst https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html — INTEL-SA-01580 (11/10/2026, Intel rates the advisory Medium; this CVE CVSS 4.0 8.4): MigTD before 0.7.2 affected, update to 0.7.2+. No mitigations listed. No exploitation or PoC seen; did not search social posts. I did not open the v0.7.2 release page itself; the version came from the advisory.

## Documents

- [advisory] INTEL-SA-01580 Intel TDX Migration Trust Domain (MigTD) Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html
- [fix] intel/MigTD v0.7.2 https://github.com/intel/MigTD/releases/tag/v0.7.2

## From the sources

Expired pointer dereference in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_