Intel TDX MigTD CVE-2026-61383

Exploitation requires local access to the platform and privileges at the hypervisor / Ring-0 system-software level (CVSS PR:L), specifically the servtd_get_quote quote-retrieval path of the Intel TDX Migration Trust Domain (MigTD). Per the vector, a particular attack requirement must be present (AT:P) and the attack is high complexity (AC:H), meaning conditions outside the attacker's full control must align for the incorrect buffer-size calculation to be triggered; the available sources do not describe the exact triggering mechanism. No user interaction is required (UI:N). Limiting factors: the attacker must already be a local, privileged system-software/hypervisor adversary; the impact is confined to low availability (DoS) of MigTD with no confidentiality or integrity impact and no effect on other systems.

This is a low-priority issue across every available signal, not a high-CVSS flaw masquerading as low risk - the signals are internally consistent. The vendor CVSS 4.0 base score is only 2.0, driven by AV:L (local access), AC:H (high attack complexity), AT:P (a specific attack requirement/precondition must be present), PR:L (requires some privilege/authentication), and an impact limited to VA:L - low availability impact only, with no confidentiality or integrity impact and no subsequent-system (scope) impact. The outcome is a denial of service confined to the MigTD component. The vuln.today decision label is 'monitor', the lowest-urgency tier, which aligns with the scoring. No EPSS score, no CISA KEV listing, and no proof-of-concept were provided in the input, so there is no evidence of exploitation or exploit tooling. Because this is a system-software adversary scenario (a Ring-0 hypervisor interacting with the Trust Domain) requiring local access, high complexity, and existing privileges to degrade only availability, it should be patched through normal maintenance rather than treated as an emergency. No signals conflict; the main gap is the absence of EPSS/KEV/POC data, whose absence is expected for a freshly disclosed low-severity Intel advisory and is not itself evidence of safety.

A privileged system-software adversary operating at the hypervisor (Ring 0) level, with local access and some authenticated privilege, crafts conditions that reach MigTD's servtd_get_quote path where a buffer size is miscalculated (CWE-131), causing a denial of service of the MigTD component. The attack is rated high complexity with a specific attack requirement, so it is not a simple or reliable trigger. No public exploit identified at time of analysis.