Intel TDX MigTD: Denial of service via integer overflow in vsock
Summary
An integer overflow in the vsock component of Intel's TDX Migration Trust Domain (MigTD) can be exploited by an authenticated local user with privileges on the host to cause a denial of service. The attack is considered highly complex and requires no special internal knowledge or user interaction. The reported impact is limited to availability, with a small integrity effect and no confidentiality impact.
Affected
- Intel(R) TDX Migration Trust Domain (MigTD)
- Specific affected versions: Unknown. See Intel advisory INTEL-SA-01580.
Fixed in
- Unknown. Check Intel advisory INTEL-SA-01580 for reference software updates.
Workaround
- Unknown. No official mitigation has been confirmed by Intel in the sources reviewed.
- Limit local access to MigTD hosts to trusted users (generic recommendation).
Exploitation
- No evidence of active exploitation found.
- No public proof of concept found.
- Not checked against CISA KEV or GitHub directly.
Our recommendation
- Only relevant if you operate Intel TDX or confidential computing infrastructure, for example through a hosting provider.
- Ask your provider whether INTEL-SA-01580 has been applied.
- Review the full Intel advisory, as this CVE is part of a larger batch of MigTD CVEs.
- Apply the vendor patch once it is confirmed for your version.
- Monitor the NVD record for analysis updates.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Intel advisory INTEL-SA-01580 intel.com
- Strix CVE-2026-60133 www.strix.ai
- OffSeq radar CVE-2026-60133 radar.offseq.com
- Third-party mirror of Intel advisory batch cve.imfht.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 15:37.
Original description (NVD)
Integer overflow in the MigTD vsock for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.