A soft‑spoken but consequential vulnerability has been confirmed in Kata Containers’ CoCo TDX path: CVE‑2025‑58354 allows a malicious host to circumvent initdata verification on TDX systems, enabling a host with sufficient control to selectively fail IO and cause confidential guests to skip...