sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...

sgx-step

Un cadre d'attaque pratique pour un contrôle précis de l'exécution des enclaves SGX-Step est un cadre open-source conçu pour faciliter la recherche sur les attaques par canaux auxiliaires sur les processeurs Intel x86 en général et les plates-formes Intel SGX en particulier. SGX-Step se compose...

sgxray

SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...

sgxray

SGXRay : Automatisation de la détection de vulnérabilités pour les applications SGX Intel SGX protège la logique applicative isolée et les données sensibles à l'intérieur d'une enclave grâce au chiffrement mémoire basé sur le matériel. L'utilisation d'un tel mécanisme de sécurité matériel nécessi...

v0ltpwn

V0LTpwn V0LTpwn CVE-2019-11157 est une attaque par faute contrôlée par logiciel sur les processeurs x86. C'est la première attaque corrompant l'intégrité des enclaves SGX. Description Tous les processeurs Intel récents présentent une interface logicielle pour contrôler les tensions du cœur sans...

snapshot-demo

Демонстрация атаки Snapshot Это оригинальная демонстрация неожиданной атаки Snapshot, обнаруженной нами. Спасибо Intel за Security Advisory. Сборка демонстрации Установка Intel SGX SDK и Occlum Прежде всего, любой желающий запустить демонстрацию должен установить Intel SGX SDK и Occlum вы можете...

Astra Linux – Vulnerability in Intel Microcode

Improper isolation of shared resources in some IntelR processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...

Astra Linux – Vulnerability in Intel Microcode

Incorrect default permissions in some memory controller configurations for certain IntelR XeonR processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable privilege escalation through local access...

ROS-20260902-73-0015

The vulnerability of the EDECCSSA function in the Software Guard eXtensions SGX microprogramming software for Intel processors is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to cause service failures...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098668)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098668 advisory. Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-35987

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

CVE-2025-35987

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

EUVD-2025-210693

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

CVE-2025-35987

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

CVE-2025-35987

CVE-2025-35987 affects Intel Software Guard Extensions Data Center Attestation Primitives (DCAP) within Ring 0. The issue is described as an omission of security-relevant information in the kernel, potentially enabling a denial of service and, with a privileged, high-complexity attacker, data alt...

PT-2026-70275

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

Oracle Linux 10 : linux-sgx (ELSA-2026-18480)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18480 advisory. 2.26-7 - Fix pccs npm security flaws 2.26-6 - Port to pycryptography and pyasn1 and make keyring optional 2.26-5 - Sync specfile changes from Fedora...

scsi: sg: Resolve soft lockup issue when opening /dev/sgX

...

UBUNTU-CVE-2026-53304

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Resolve soft lockup issue when opening /dev/sgX The parameter defreservedsize defines the default buffer size reserved for each Sgfd and should be restricted to a range between 0 and 1,048,576 see...

Oracle Linux 9 : linux-sgx (ELSA-2026-18868)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18868 advisory. 2.26-7 - Fix pccs npm security flaws 2.26-6 - Port to pycryptography and pyasn1 and make keyring optional 2.26-5 - Sync specfile changes from Fedora...