{"id":160597,"date":"2026-02-11T17:11:57","date_gmt":"2026-02-11T15:11:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx"},"modified":"2026-02-11T17:11:57","modified_gmt":"2026-02-11T15:11:57","slug":"uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx","title":{"rendered":"Vulnerabiliteet, mis v\u00f5imaldab m\u00f6\u00f6da minna Intel TDX kaitsemehhanismist","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Google ja Intel avaldasid koost\u00f6\u00f6s tehtud Intel TDX 1.5 (Trusted Domain Extensions) turvamehhanismi auditi tulemused (PDF). Intel TDX tehnoloogia v\u00f5imaldab virtuaalmasinate m\u00e4lu kr\u00fcpteerimist, et kaitsta neid host-s\u00fcsteemi administraatori sekkumisest ja riistvara f\u00fc\u00fcsilistest r\u00fcnnakutest. Auditi k\u00e4igus tuvastati 6 haavatavust ja 35 mitte-turvalisuse vigade juhtumit.     <\/p>\n<p>Probleemid m\u00f5jutavad Intel Xeon 6, samuti 4. ja 5. p\u00f5lvkonna Intel Xeon Scalable protsessoreid. Haavatavused on k\u00f5rvaldatud eile v\u00e4lja antud mikrokoodi v\u00e4rskenduses. GitHubis on avaldatud t\u00f6\u00f6riistade komplekt Intel TDX haavatavuste \u00e4rakasutamiseks ja protot\u00fc\u00fcbid kahele haavatavusele (CVE-2025-30513, CVE-2025-32007).        <\/p>\n<p>K\u00f5ige ohtlikum haavatavus (CVE-2025-30513) v\u00f5imaldab usaldusv\u00e4\u00e4rsusetu administraatoril, kellel on juurdep\u00e4\u00e4s host-s\u00fcsteemile, t\u00f5sta oma \u00f5igusi ja t\u00e4ielikult kompromiteerida Intel TDX tehnoloogia pakutavaid turvalisuse garantiisid. Haavatavus tuleneb v\u00f5istlusolukorrast \u00fche TDX mooduli seas, mis v\u00f5imaldab virtuaalmasina migratsiooni ajal kaitstud keskkonna (TD - Trusted Domain) viimist migreerimise toetamise seisundist, mis lubab edasiviimist t\u00f5rkere\u017eiimi.     <\/p>\n<p>Probleem tuleneb v\u00f5imalusest keskkonna atribuutide asendamiseks p\u00e4rast nende kontrollimist, kuid enne nende muutumatuks muutmist migreeritud keskkonnas. P\u00e4rast silumise atribuudi seadmist v\u00f5ib host-s\u00fcsteemi administraator reaalajas j\u00e4lgida kaitstud k\u00fclgs\u00fcsteemi tegevust ja p\u00e4\u00e4seda juurde dekodeeritud m\u00e4luseisundile.     <\/p>\n<p>Haavatavuse \u00e4rakasutamine on piisavalt lihtne, kuna administraator v\u00f5ib igal ajal algatada kaitstud virtuaalmasina live-migreerimise protsessi. Probleem avastati Google'i teadlaste poolt, kes t\u00e4helepanu p\u00f6\u00f6rasid API uurimise k\u00e4igus FSM (Finite State Machine) operatsioonide olekute j\u00e4lgimise, importimisoperatsiooni katkestamise t\u00f6\u00f6tlemise ning milles seisundi muutmine ei toimu ja ei naase algseisundisse p\u00e4rast eba\u00f5nnestumist.      <\/p>\n<p>V\u00e4hem ohtlikud haavatavused:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2025-32007 - t\u00e4isarvu \u00fclet\u00e4itumine metainfo t\u00f6\u00f6tlemise koodis, mis p\u00f5hjustab live-migratsiooni k\u00e4igus 8 KB de\u0161ifreeritud andmete lekke praegusest loogilise protsessori (LP, Logical Processor) virnast.\n<li class=\"l\"> CVE-2025-32467 - mitteinitsialiseeritud muutujate kasutamine m\u00f5nes TDX moodulis v\u00f5ib viia j\u00e4\u00e4kinfo lekkeni.\n<li class=\"l\"> CVE-2025-27572 - konfidentsiaalsete andmete kogunemine spekulatiivsete juhiste t\u00e4itmise k\u00e4igus v\u00f5ib viia teabe lekkeni.\n<li class=\"l\"> CVE-2025-27940 - m\u00e4lu lugemine eraldatud puhvriv\u00e4ljast v\u00f5ib viia teabe lekkeni.\n<li class=\"l\"> CVE-2025-31944 - v\u00f5istlusolukord, mis v\u00f5ib p\u00f5hjustada teenuse katkestamise.    <\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=64774\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Intel \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b (PDF) \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0430\u0443\u0434\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 Intel TDX 1.5 (Trusted Domain Extensions). \u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f Intel TDX \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0434\u043b\u044f \u0438\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 35 \u043d\u0435 \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-160597","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Intel \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b (PDF) \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0430\u0443\u0434\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 Intel TDX 1.5 (Trusted Domain Extensions).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b Intel TDX | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Intel \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b (PDF) \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0430\u0443\u0434\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 Intel TDX 1.5 (Trusted Domain Extensions).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-02-11T15:11:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-02-11T15:11:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Haavatavus, mis v\u00f5imaldab Intel TDX kaitsemehhanismi \u00fcletada | ProHoster","description":"Google ja Intel avaldasid tulemused (PDF) koost\u00f6\u00f6st Intel TDX 1.5 (Trusted Domain Extensions) turvaauditil.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b Intel TDX | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Intel \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b (PDF) \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0430\u0443\u0434\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 Intel TDX 1.5 (Trusted Domain Extensions).","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-11T15:11:57+00:00","article:modified_time":"2026-02-11T15:11:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"160597","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-11 15:12:59","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-11 15:11:57","updated":"2026-02-11 15:12:59","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/160597","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=160597"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/160597\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=160597"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=160597"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=160597"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}