Enclave Os Virtual
Monthly
Quote relay in the TDX/GPU RA-TLS certificate issuer of Privasys Enclave OS Virtual lets a relying party accept an attacker-terminated TLS connection as a genuine attested enclave, defeating the confidentiality guarantee of the confidential VM. All TDX and GPU-enabled builds prior to tdx-v0.2.43 and tdx-gpu-v0.6.27 are affected; exploitation is remote and unauthenticated per the CVSS vector (AV:N/PR:N) but is gated by a demanding precondition - the attacker must already hold a valid enclave TLS private key and be positioned to terminate or relay the victim's TLS session (AC:H, AT:P), which is why real-world exploitability is materially lower than the 9.1 base score suggests. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV; vendor-released fixes exist in tdx-v0.2.43 and tdx-gpu-v0.6.27.
Quote relay in the TDX/GPU RA-TLS certificate issuer of Privasys Enclave OS Virtual lets a relying party accept an attacker-terminated TLS connection as a genuine attested enclave, defeating the confidentiality guarantee of the confidential VM. All TDX and GPU-enabled builds prior to tdx-v0.2.43 and tdx-gpu-v0.6.27 are affected; exploitation is remote and unauthenticated per the CVSS vector (AV:N/PR:N) but is gated by a demanding precondition - the attacker must already hold a valid enclave TLS private key and be positioned to terminate or relay the victim's TLS session (AC:H, AT:P), which is why real-world exploitability is materially lower than the 9.1 base score suggests. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV; vendor-released fixes exist in tdx-v0.2.43 and tdx-gpu-v0.6.27.