CVE-2025-31944
Awaiting Analysis Awaiting Analysis - Queue
Race Condition in Intel TDX Module Causes Denial of Service

Publication date: 2026-02-10

Last updated on: 2026-02-10

Assigner: Intel Corporation

Description
Race condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-10
Last Modified
2026-02-10
Generated
2026-06-16
AI Q&A
2026-02-10
EPSS Evaluated
2026-06-14
NVD
CVE-2025-31944
EUVD
EUVD-2025-207267
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
intel tdx_module to tdx1.5 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-362 The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a race condition found in some versions of the Intel TDX Module before version tdx1.5, specifically within Ring 0 of the hypervisor. A race condition occurs when multiple processes access shared resources concurrently, leading to unexpected behavior. In this case, an authorized adversary with privileged user access can exploit this race condition through a complex attack to cause a denial of service (DoS) on the system.

The attack requires local access and does not need special internal knowledge or user interaction, but it is complex and requires high privileges.

Impact Analysis

This vulnerability primarily impacts the availability of the affected system, potentially causing a denial of service. It does not affect the confidentiality or integrity of the system.

  • An authorized user with high privileges could exploit this to disrupt system operations.
  • The attack requires local access and is complex, so it is less likely to be exploited remotely or by unprivileged users.
Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-31944. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart