igvm

igvm This project is the home of the Independent Guest Virtual Machine IGVM file format. The format specification can be found in the igvmdefs crate, with a Rust implementation of the binary format in the igvm crate. The IGVM file format is designed to encapsulate all information required to laun...

CVE-2026-92701

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body...

CVE-2026-92701

Cocos AI (ultravioletrs) versions up to and including 0.8.2 contain a session-misbinding vulnerability in the intra-handshake attested TLS (aTLS) Intel TDX verifier path . The root cause is that the expected current-session freshness value is not copied into the TDX quote-body policy before quote...

CVE-2026-92701 Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body...

CVE-2026-92701 Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body...

PT-2026-95556

Name of the Vulnerable Software and Affected Versions versions prior to 0.9.0 Description The intra-handshake attested TLS aTLS Intel TDX verification path fails to copy the expected current-session freshness value into the TDX quote-body policy before quote validation. Consequently, structurally...

CVE-2026-92701: Origin Validation Error

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: microcode_ctl (UTSA-2026-110881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110881 advisory. Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege...

The vulnerabilities of Intel TDX, Intel Scalable SGX, and AMD SEV-SNP microprogramming software for Intel and AMD processors allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of implementations of confidential computing technologies such as Intel TDX, Intel Scalable SGX, and AMD SEV-SNP microprogramming software for Intel and AMD processors is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers...

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

Researchers have disclosed a new hardware attack, called DDRop , that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current. The attack requires an attacker who...

SpliTEE: Improving LLM Inference on Trusted Hardware with Differentially Private GPU Outsourcing

User prompts provided to large language models LLMs may contain sensitive or private information that can be misused by remotely deployed models, such as through inadvertent memorization during retraining. One way to protect user prompts is to execute the LLM inside a trusted execution environmen...

PT-2026-94126

Уязвимость реализации технологий конфиденциальных вычислений Intel TDX, Intel Scalable SGX и AMD SEV-SNP микропрограммного обеспечения процессоров Intel и AMD связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...

MGASA-2026-0374 Updated microcode packages fix security vulnerabilities

A potential security vulnerability for some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow escalation of privilege. CVE-2025-31936 A potential security vulnerability in some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow...

HPESBHF05108 rev.1 - HPE StoreEasy Server Using Certain Intel Processors, INTEL-SA-01436, Intel Trust Domain Extensions (Intel TDX) module Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 HPE...

Amazon Linux 2023 : microcode_ctl (ALAS2023-2026-2080)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2080 advisory. Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege. SMM adversary with a...

Important: microcode_ctl

Issue Overview: Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. Th...

Benchmarking Confidential Computing Performance on NVIDIA Blackwell GPUs

This paper measures the performance impact of running large language model inference and training inside a Trusted Execution Environment TEE on NVIDIA B200 GPUs, using Intel Trust Domain Extensions TDX confidential VMs together with NVIDIA Confidential Computing CC on Blackwell GPUs. The...

SUSE CVE-2025-31936

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2026-20885

Improper authentication in the IntelR TDX module for some IntelR platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...

CVE-2026-20775

Uncaught exception for some IntelR TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requiremen...