CVE-2026-60138

Use of out-of-range pointer offset in the MigTD's virtio-vsock implementation for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalatio...

CVE-2026-60133

Integer overflow in the MigTD vsock for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially...

CVE-2026-60071

Improper validation of specified quantity in input in the MigTD vsock packet handling for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial o...

CVE-2026-63028

A vulnerability exists in the MigTD virtio-vsock stream handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0. The root cause is improper initialization , which may allow a system software adversary with unauthenticated local access to perform a denial of service or cause dat...

EUVD-2026-121703

Improper initialization in the MigTD virtio-vsock stream handling for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with an unauthenticated user combined with a low complexity attack may enable data corruption. This...

EUVD-2026-121699

Expired pointer dereference in the MigTD's virtio-vsock implementation for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. System software adversary with a privileged user combined with a low complexity attack...

CVE-2026-62929

A vulnerability exists in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) operating within Ring 0 . The root cause is an expired pointer dereference , which may allow a system software adversary with privileged user access to perform a low-complexity at...

CVE-2026-60138

A vulnerability exists in the virtio-vsock implementation of the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor. The root cause is a use of out-of-range pointer offset (CWE-823). A system software adversary with privileged user access can perform a low complexity attack to ...

EUVD-2026-121685

Use of out-of-range pointer offset in the MigTD's virtio-vsock implementation for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalatio...

CVE-2026-60133

An integer overflow vulnerability exists in the MigTD vsock for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0 . This flaw in the Hypervisor could allow an unprivileged software adversary with authenticated user access to perform a denial of service (DoS) attack. The exploit requir...

EUVD-2026-121684

Integer overflow in the MigTD vsock for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially...

EUVD-2026-121683

Improper validation of specified quantity in input in the MigTD vsock packet handling for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial o...

CVE-2026-60071

The Intel(R) TDX Migration Trust Domain (MigTD) within the Ring 0: Hypervisor is vulnerable to a denial of service due to improper validation of specified quantity in input during MigTD vsock packet handling . A system software adversary with privileged user access can execute a low-complexity at...

CVE-2025-21756

CVE-2025-21756 — Exploitation Lab For educational and authorized security research purposes only. Description CVE-2025-21756 is a use-after-free UAF vulnerability in the Linux kernel's vsock Virtual Socket subsystem, disclosed on February 26, 2025. It allows a local attacker to escalate privilege...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 “vsock/virtio: stop workers during the .remove” made the RX worker jump to its common exit when rxrun is clear. That exit still refills the RX queue wh...

PT-2026-136353

Name of the Vulnerable Software and Affected Versions Docker Desktop for Windows versions prior to 4.98.0 WSL versions prior to 3.0.3 Description In Docker Desktop for Windows using the WSL2 backend on x86-64 architectures, an unprivileged Linux container can bypass the default seccomp restrictio...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: reading virtqueues under worker locks The commit bd50c5dc182b “vsock/virtio: add support for device suspend/resume” caused the run flags to transition from false to true when restore installs replacement virtqueues...

CVE-2026-99123

A flaw was found in the Linux kernel's Virtual Sockets vsock virtio transport. Incoming packets for connecting sockets are not properly validated against their expected source address. A local, unprivileged attacker can exploit this vulnerability by sending crafted packets during connection setup...

CVE-2026-98947

A flaw was found in the Linux kernel's Virtual Sockets vsock subsystem during Virtual Machine Communication Interface VMCI datagram socket closure. When closing a datagram socket, incoming packets added to the socket's backlog can be moved back to the receive queue without proper cleanup. A local...