This vulnerability in Intel(R) TDX Guest software prior to version 0.3.1 arises from an incorrect comparison in Ring 3 user applications, which may allow escalation of privilege by a system software adversary possessing privileged user access. The attack requires local access, no user interaction, and low complexity, but does not require special internal knowledge. The potential impact is limited to low confidentiality, integrity, and availability impacts on the vulnerable system, with no subsequent broader system impacts reported. The CVSS 4.0 base score is 4.6, indicating medium severity. No patch or remediation level has been disclosed by the vendor as of the publication date.

The vulnerability may allow a local system software adversary with privileged user rights to escalate privileges within the Intel(R) TDX Guest software environment. The impact on confidentiality, integrity, and availability is rated as low at the vulnerable system level, with no further impact on overall system confidentiality, integrity, or availability. There are no reports of exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been published, users should monitor Intel's advisories for updates. No specific mitigation steps are provided by the vendor at this time.