CVE-2025-31356
Description
A flaw was found in the kernel's handling of Intel(R) Trust Domain Extensions (Intel(R) TDX). Insufficient verification of data authenticity within the hypervisor may allow a local system software adversary with privileged access to disclose sensitive information. This vulnerability, requiring a high complexity attack, primarily impacts confidentiality and could lead to data exposure.
Statement
This vulnerability is rated as Moderate impact because successful exploitation requires highly privileged host access alongside complex execution conditions on systems running hardware-assisted confidential virtualization. In typical Red Hat Enterprise Linux deployments, the affected code paths are only engaged when the host operates as a hypervisor managing Intel Trust Domain Extensions (TDX) confidential workloads on supported processor platforms. Environments that do not host TDX-enabled virtual machines are not exposed to this risk.
Understanding the Weakness (CWE)
Access Control,Integrity,Confidentiality
Technical Impact: Gain Privileges or Assume Identity; Modify Application Data; Execute Unauthorized Code or Commands
An attacker could gain access to sensitive data and possibly execute unauthorized code.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
