Intel · Intel Tdx Module · CVE-2024-27457
Name of the Vulnerable Software and Affected Versions:
Intel TDX Module firmware versions prior to 1.5.06
Description:
The issue is related to an improper check for unusual or exceptional conditions in the Intel TDX Module firmware. This may allow a privileged user to potentially enable information disclosure via local access. The vulnerability is also described as being related to incomplete filtering of special elements, which could allow an attacker to gain unauthorized access to protected information.
Recommendations:
For Intel TDX Module firmware versions prior to 1.5.06, update to version 1.5.06 or later to resolve the issue.
As a temporary workaround, consider restricting local access to the Intel TDX Module firmware until a patch is available.