This vulnerability arises from improper authentication in the Intel(R) TDX module on certain Intel platforms operating within Ring 0: Trust Domain. An attacker with privileged user access and local system access, combined with a high complexity attack, could exploit this flaw to escalate privileges and disclose sensitive information. The attack does not require user interaction or special internal knowledge beyond the stated conditions. The vulnerability affects system confidentiality and integrity at high levels initially, with potential subsequent lower-level impacts on confidentiality and integrity. Availability is not affected. The CVSS 4.0 base score is 7.0, reflecting high severity with local attack vector, high attack complexity, and privileges required.

The vulnerability may lead to unauthorized information disclosure and escalation of privilege on affected Intel platforms. Confidentiality and integrity impacts are rated high initially, potentially resulting in further lower-level confidentiality and integrity issues. There is no impact on system availability. Exploitation requires local privileged user access and a complex attack, limiting the attack surface to adversaries with significant access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published at this time. Organizations should monitor Intel advisories for updates and apply patches promptly once available.