sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...

sgxray

SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...

sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step은 Intel x86 프로세서, 특히 Intel SGX 플랫폼에서의 부채널 공격 연구를 용이하게 하기 위한 오픈소스 프레임워크입니다. SGX-Step은 적대적 Linux 커널 드라이버와 사용자 공간에서 신뢰할 수 없는 페이지 테이블 엔트리 및/또는 x86 APIC 타이머 인터럽트를 완전히 구성할 수 있는 작은 사용자 공간 운영 체제 라이브러리로 구성됩니다. SGX-Step은 우리의 연구뿐만 아니...

sgxray

SGXRay: SGX 앱을 위한 취약점 탐지 자동화 Intel SGX는 하드웨어 기반 메모리 암호화를 통해 격리된 애플리케이션 로직과 민감한 데이터를 보호합니다. 이러한 하드웨어 기반 보안 메커니즘을 사용하려면 메모리 사용에 대한 엄격한 프로그래밍 모델이 필요하며, 보호 영역 경계 안팎에는 복잡한 API가 있습니다. 보호 영역 개발자는 특히 신뢰할 수 있는 경계를 넘어 흐르는 데이터를 처리할 때 보호 영역 보안을 보장하기 위해 신중한 프로그래밍 방법을 적용해야 합니다. 신뢰할 수 있는 경계 위반은 메모리 손상을 일으킬 수 있으...

v0ltpwn

V0LTpwn V0LTpwn CVE-2019-11157 は、x86 プロセッサに対するソフトウェア制御のフォールト攻撃です。SGX エンクレーブの整合性を破壊する初の攻撃です。 説明 最近の Intel プロセッサはすべて、システムを再起動せずにコア電圧を制御するソフトウェアインターフェースを備えています。この機能は通常の操作には必要ありませんが、エキスパートユーザーがパフォーマンス最適化のために使用します。例えば、オーバークロッキングコミュニティでは Intel の XTU アプリケーションで利用されています。 V0LTpwn...

snapshot-demo

スナップショット攻撃デモ これは、私たちが発見した予期しないスナップショット攻撃（Unanticipated Snapshot Attack）のオリジナルデモです。セキュリティアドバイザリを公開してくれたIntelに感謝します。 デモのビルド Intel SGX SDK と Occlum のインストール まず、デモを実行したい人は誰でも Intel SGX SDK と Occlum をインストールする必要があります（変更を加えた SGX SDK を使用することもできます）。Occlum/SDK を手早くインストールするための Dockerfile を用意しています。変更を加えた SGX...

Astra Linux – Vulnerability in Intel Microcode

Improper isolation of shared resources in some IntelR processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...

Astra Linux – Vulnerability in Intel Microcode

Incorrect default permissions in some memory controller configurations for certain IntelR XeonR processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable privilege escalation through local access...

ROS-20260902-73-0015

The vulnerability of the EDECCSSA function in the Software Guard eXtensions SGX microprogramming software for Intel processors is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to cause service failures...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098668)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098668 advisory. Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-35987

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

CVE-2025-35987

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

EUVD-2025-210693

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

CVE-2025-35987

CVE-2025-35987 affects Intel Software Guard Extensions Data Center Attestation Primitives (DCAP) within Ring 0. The issue is described as an omission of security-relevant information in the kernel, potentially enabling a denial of service and, with a privileged, high-complexity attacker, data alt...

CVE-2025-35987

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

PT-2026-70275

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

Oracle Linux 10 : linux-sgx (ELSA-2026-18480)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18480 advisory. 2.26-7 - Fix pccs npm security flaws 2.26-6 - Port to pycryptography and pyasn1 and make keyring optional 2.26-5 - Sync specfile changes from Fedora...

scsi: sg: Resolve soft lockup issue when opening /dev/sgX

...

UBUNTU-CVE-2026-53304

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Resolve soft lockup issue when opening /dev/sgX The parameter defreservedsize defines the default buffer size reserved for each Sgfd and should be restricted to a range between 0 and 1,048,576 see...

Oracle Linux 9 : linux-sgx (ELSA-2026-18868)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18868 advisory. 2.26-7 - Fix pccs npm security flaws 2.26-6 - Port to pycryptography and pyasn1 and make keyring optional 2.26-5 - Sync specfile changes from Fedora...