Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and… (CVE-2026-20885)

This vulnerability involves improper authentication in the Intel TDX module for certain Intel platforms within Ring 0 Trust Domain. A privileged local adversary with high attack complexity can exploit this flaw to escalate privileges and disclose information. The attack does not require user interaction or special internal knowledge but does require local access. The vulnerability affects system confidentiality and integrity, with no impact on availability. The CVSS 3.1 score is 7.2 (High), reflecting local attack vector, high attack complexity, and required privileges. No affected versions or patch information is provided.

The vulnerability can lead to high confidentiality and integrity impacts on the affected system, allowing an attacker with privileged local access to escalate privileges and disclose sensitive information. There is no impact on system availability. The overall system confidentiality and integrity may be subsequently affected at a lower level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, limit privileged local access and monitor for unusual activity consistent with privilege escalation attempts.