CVE-2025-30513CWE-362

Race condition for some TDX Module within Ring 0: Hypervisor may allow an escalation of privilege

High · published February 10, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

⚡ A race condition in the TDX Module could let system software adversaries elevate their privileges without a single click! 🤯 Think of it like a rushed chef at a busy restaurant who accidentally mixes up orders, serving the gourmet dish meant for the VIP table to anyone who asks. In this case, privileged access is handed over to the wrong person, and the consequences could be dire! If exploited, an attacker could gain unauthorized access to sensitive parts of the system, threatening confidentiality and integrity like a locked vault being opened by an uninvited guest. This could lead to significant data breaches, with the attacker having the potential to manipulate or steal critical information.

Put simply

Think of it like a rushed chef at a busy restaurant who accidentally mixes up orders, serving the gourmet dish meant for the VIP table to anyone who asks. In this case, privileged access is handed over to the wrong person, and the consequences could be dire! This CVE highlights a race condition within the TDX Module that permits an escalation of privileges due to flawed synchronization in the hypervisor, allowing adversaries to exploit the system with local access and specialized internal knowledge without user interaction.

What to do

If exploited, an attacker could gain unauthorized access to sensitive parts of the system, threatening confidentiality and integrity like a locked vault being opened by an uninvited guest. This could lead to significant data breaches, with the attacker having the potential to manipulate or steal critical information. To patch this vulnerability, ensure you update to the latest version of the TDX Module as soon as it’s available. Additionally, conduct a thorough audit of user privileges to ensure no unnecessary access is granted. You've got this! With swift action, you can tighten your security and safeguard your system! 🛡️

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00136 · 2.8th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-02-10T16:25Z
EPSS history
Timeline
  • 10 FEB 16:25Z
    Race condition for some TDX Module within Ring 0: Hypervisor may allow an escalation of privilege
    cvelistv5