# CVE-2025-31356: Intel Trust Domain Extensions data authenticity verification bypass

Source: https://junglewise.ai/threats/cve-2025-31356-intel-trust-domain-extensions-data-authenticity-verification  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2025-31356 · Severity: info · CVSS 5.6 · Published 2026-08-11

Intel Trust Domain Extensions (TDX) is a processor security feature that isolates sensitive workloads in virtualized environments. A vulnerability in TDX's data authenticity verification could allow privileged attackers to read sensitive information from protected memory regions. Exploitation requires local access and high system privileges, but successful attacks could expose confidential data processed within these isolated domains.

Technologies: [Intel Xeon 6 SoC](https://junglewise.ai/threats/technologies/xeon-6-soc). Vendors: [Intel](https://junglewise.ai/threats/vendors/intel).

## Quick answers

**Is CVE-2025-31356 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-31356 being exploited in the wild.

**How severe is CVE-2025-31356?** Informational severity, with a CVSS score of 5.6, published 11 August 2026.

**Which products and versions are affected?** Intel Xeon 6 SoC 2.0.14 and earlier; Intel Xeon 6 with E-cores 1.5.24 and earlier; Intel Xeon 6 with P-cores 2.0.14 and earlier; Intel Xeon Scalable (4th Gen) 1.5.24 and earlier; and 1 more.

**Is there a fix for CVE-2025-31356?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-31356 attacked?** It is attacked with local access.

**Am I affected by CVE-2025-31356?** Check whether you run Intel Xeon 6 SoC, Intel Xeon 6 with E-cores, Intel Xeon 6 with P-cores or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is a cryptographic verification flaw in Intel TDX's Ring 0 (hypervisor-level) authenticity checks. An attacker with high privilege (PR:H) can exploit insufficient data authenticity verification to bypass TDX isolation guarantees and disclose information from trusted execution domains. The attack vector is local (AV:L), requires high complexity (AC:H) and specific system prerequisites (AT:P), but requires no user interaction. Exploitation results in high confidentiality impact and low integrity impact. Intel has released firmware updates for affected Xeon Scalable processors to mitigate this issue.

## Affected products

- Intel Xeon Scalable (4th Gen) 1.5.24 and earlier
- Intel Xeon Scalable (5th Gen) 1.5.24 and earlier
- Intel Xeon 6 with P-cores 2.0.14 and earlier
- Intel Xeon 6 SoC 2.0.14 and earlier
- Intel Xeon 6 with E-cores 1.5.24 and earlier

## Timeline

- 2026-08-11: disclosed

## References

- [https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01419.html](https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01419.html)

## Related threats

- [Intel Xeon processors firmware improper input validation privilege escalation](https://junglewise.ai/threats/cve-2026-20901-intel-xeon-processors-firmware-improper-input-validation)
- [Intel TDX module improper authentication in Ring 0](https://junglewise.ai/threats/cve-2026-20885-intel-tdx-module-improper-authentication-in-ring-0)
- [Intel TDX module uncaught exception denial of service](https://junglewise.ai/threats/cve-2026-20775-intel-tdx-module-uncaught-exception-denial-of-service)
- [Intel Processors privilege escalation in Ring 3 user applications](https://junglewise.ai/threats/cve-2026-20716-intel-processors-privilege-escalation-in-ring-3-user-applications)
- [Intel Xeon firmware control flow privilege escalation](https://junglewise.ai/threats/cve-2026-20713-intel-xeon-firmware-control-flow-privilege-escalation)