Incorrect Comparison in Intel Trust Domain Extensions (TDX) module - CVE-2026-20765
Published: August 19, 2026
Vulnerability identifier: #VU144248
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-20765
CWE-ID: CWE-697
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local administrator to escalate privileges on the system.
The vulnerability exists due to incorrect comparison, which leads to security restrictions bypass and privilege escalation.
Affected software
Intel Trust Domain Extensions (TDX) module
How to mitigate CVE-2026-20765
Install updates from vendor's website.
Intel Trust Domain Extensions (TDX) module - update to 0.3.1