igvm

igvm This project is the home of the Independent Guest Virtual Machine IGVM file format. The format specification can be found in the igvmdefs crate, with a Rust implementation of the binary format in the igvm crate. The IGVM file format is designed to encapsulate all information required to laun...

CVE-2026-108268

Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to th...

AlmaLinux 9.2 [TuxCare] Security Update: microcode_ctl (ALMALINUX9.2:CLSA-2026:1770215200)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1770215200 advisory. - Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766488019)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766488019 advisory. - In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports ...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766488019)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766488019 advisory. - In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a...

CVE-2026-92701

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body...

CVE-2026-92701

Cocos AI (ultravioletrs) versions up to and including 0.8.2 contain a session-misbinding vulnerability in the intra-handshake attested TLS (aTLS) Intel TDX verifier path . The root cause is that the expected current-session freshness value is not copied into the TDX quote-body policy before quote...

CVE-2026-92701 Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body...

EUVD-2026-83194

trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body policy before quote validation, so structurally valid TDX QuoteV4 Evidence is...

CVE-2026-92701 Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body...

PT-2026-95556

Name of the Vulnerable Software and Affected Versions versions prior to 0.9.0 Description The intra-handshake attested TLS aTLS Intel TDX verification path fails to copy the expected current-session freshness value into the TDX quote-body policy before quote validation. Consequently, structurally...

CVE-2026-92701: Origin Validation Error

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: microcode_ctl (UTSA-2026-110881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110881 advisory. Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege...

kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM

A flaw was found in IntelR XeonR 6 processors when using IntelR TDX within System Management Mode SMM. Improper handling of overlap between protected memory ranges may allow a local attacker with privileged user access to escalate privileges. This vulnerability could lead to high impact on...

The vulnerabilities of Intel TDX, Intel Scalable SGX, and AMD SEV-SNP microprogramming software for Intel and AMD processors allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of implementations of confidential computing technologies such as Intel TDX, Intel Scalable SGX, and AMD SEV-SNP microprogramming software for Intel and AMD processors is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers...

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

Researchers have disclosed a new hardware attack, called DDRop , that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current. The attack requires an attacker who...

Astra Linux – Vulnerability in Intel Microcode

Improper input validation in some IntelR TDX module software prior to version 1.5.05.46.698 may allow a privileged user to potentially enable privilege escalation through local access...

SpliTEE: Improving LLM Inference on Trusted Hardware with Differentially Private GPU Outsourcing

User prompts provided to large language models LLMs may contain sensitive or private information that can be misused by remotely deployed models, such as through inadvertent memorization during retraining. One way to protect user prompts is to execute the LLM inside a trusted execution environmen...

PT-2026-94126

Уязвимость реализации технологий конфиденциальных вычислений Intel TDX, Intel Scalable SGX и AMD SEV-SNP микропрограммного обеспечения процессоров Intel и AMD связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...

SUSE CVE-2026-89751

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...