CVE-2024-21850 Vulnerability Details

Record summary

CVE-2024-21850 has a selected CVSS score of 8.3 (high).

Description

Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr module software before version 1.5.02.00 may allow a privileged user to potentially enable escalation of privilege via local access.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 14, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
tdx_module_software Browse intel / tdx_module_software Default status: unknown	CVE List	Before 1.5.02.00	affected
Intel(R) TDX Seamldr module software Default status: unaffected	CVE List	before version 1.5.02.00	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-21850

intel.com

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01076.html