EUVD-2026-56494
GHSA-5j5j-vmr5-mmmh
Severity by source
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local-only access, high complexity and Ring 0 privilege required; impact is purely availability loss with no scope change beyond the vulnerable system.
Primary rating from Vendor (intel).
CVSS VectorVendor: intel
Lifecycle Timeline
1DescriptionCVE.org
Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.
AnalysisAI
Denial of service in Intel TDX (Trust Domain Extensions) modules at Ring 0 can be triggered by a system software adversary who already holds kernel-level privileges, causing an uncaught exception that crashes Trust Domain availability. Exploitation is constrained to local access with high attack complexity and specific attack prerequisites, meaning only highly privileged, sophisticated actors in TDX-enabled environments are realistic threat actors. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an attacker operating at Ring 0 privilege - full kernel or hypervisor control on the target system - which is the highest CPU privilege level available in x86 architecture. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 6.8 (Medium) accurately reflects a tightly constrained attack surface: local vector (AV:L), high complexity (AC:H), attack requirements present (AT:P), and high privilege required (PR:H) together create a scenario where only a Ring 0 system software adversary - someone who already owns the hypervisor or kernel - can trigger the flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult Intel Security Advisory INTEL-SA-01436 at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01436.html for updated TDX module packages and deployment instructions specific to your platform. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-248 – Uncaught Exception
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today