CVE-2023-38023

SCONE Confidential Computing Platform before 5.8.0 (Intel SGX) is affected. The root cause is lack of pointer-alignment logic in __scone_dispatch and other entry functions, enabling a local attacker to access unauthorized information (AEPIC Leak). Affected component: scone dispatch/entry points. ...