CVE-2025-31356

Awaiting Analysis Awaiting Analysis - Queue

Intel TDX Ring 0 Information Disclosure Vulnerability

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without any user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and no effect on availability. Subsequent system impacts include reduced confidentiality (low), integrity (low), and no effect on availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2025-31356

EUVD

EUVD-2025-210689

Affected Vendors & Products

Vendor	Product	Version / Range
intel	trust_domain_extensions	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-345	The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

Executive Summary

This vulnerability involves insufficient verification of data authenticity in Intel Trust Domain Extensions (T DX) within Ring 0, specifically the Hypervisor. A privileged adversary with local access could exploit high-complexity attacks to disclose data. It primarily impacts confidentiality (high), with minor effects on integrity (low) and no impact on availability.

Detection Guidance

This vulnerability cannot be directly detected via standard commands as it involves a hardware-level issue in Intel TDX. Detection would require vendor-specific tools or firmware updates from Intel to identify affected systems.

Impact Analysis

If exploited, this vulnerability may lead to unauthorized data exposure, potentially compromising sensitive information. The impact is limited to confidentiality and integrity, with no direct effect on system availability. Attackers require privileged access and high attack complexity.

Compliance Impact

This vulnerability could lead to data breaches, which may violate compliance requirements under GDPR (data protection) and HIPAA (health information security). Organizations must assess exposure risks and implement mitigations to maintain regulatory adherence.

Mitigation Strategies

Apply Intel's official firmware or software updates for Intel TDX. Monitor Intel's security advisories for patches. Restrict privileged user access to reduce attack surface. Ensure hypervisor and system software are updated to the latest versions.

Hi! I’m here to help you understand CVE-2025-31356. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70