CVE-2023-52568

CVE-2023-52568 affects the Linux kernel SGX path, specifically the EAUG race with page-fault handling. The vulnerability arises when the SGX EPC reclaimer (ksgxd) reclaims the SECS EPC page and sets secs.epc_page to NULL; EAUG and ELDU both use this page, but the NULL check was only applied to EL...

CVE-2023-52568 x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race The SGX EPC reclaimer ksgxd may reclaim the SECS EPC page for an enclave and set secs.epcpage to NULL. The SECS page is used for EAUG and ELDU in the SGX page fault...