occlum

NEWS: Our paper Occlum: Secure and Efficient Multitasking Inside a Single Enclave of Intel SGX has been accepted by ASPLOS'20. This research paper highlights the advantages of the single-address-space architecture adopted by Occlum and describes a novel in-enclave isolation mechanism that...

sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...

sgxray

SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...

v0ltpwn

V0LTpwn V0LTpwn CVE-2019-11157 is a software-controlled fault attack on x86 processors. It is the first attack corrupting the integrity of SGX enclaves. Description All recent Intel processors exhibit a software interface for controlling core voltages without rebooting the system. This feature is...

CLEANSTART-2024-AK19680 Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access

Security vulnerability affects the intel-ucode package. Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CLEANSTART-2024-DW19044 Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privi...

Security vulnerability affects the intel-ucode package. Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

Intel® Processors Load Value Injection Advisory

Summary: Potential security vulnerabilities in some Intel® Processors may allow information disclosure. Intel and others are releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0551 Description: Load value injection in some IntelR...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131733 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Fix deadlock in SGX NUMA node search When the current node doesn't have an EPC section...

Astra Linux – vulnerability in intel-microcode

Incorrect default permissions in certain memory controller configurations on some IntelR XeonR processors when using IntelR Software Guard Extensions; this may allow a privileged user to potentially escalate privileges via local access...

EulerOS 2.0 SP11 : linux-sgx (EulerOS-SA-2026-4253)

According to the versions of the linux-sgx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: When CMS password-based decryption RFC 3211 / PWRI key unwrap processes attacker-supplied CMS data, an attacker-chosen stream-mo...

sgx-step

Un marco práctico de ataque para el control preciso de la ejecución de enclaves SGX-Step es un marco de trabajo de código abierto para facilitar la investigación de ataques de canal lateral en procesadores Intel x86 en general y en plataformas Intel SGX en particular. SGX-Step consiste en un...

EUVD-2026-95996

Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS...

sgxray

SGXRay: Automatizzare il rilevamento delle vulnerabilità per le app SGX Intel SGX protegge la logica applicativa isolata e i dati sensibili all'interno di un enclave con crittografia della memoria basata su hardware. Per utilizzare questo meccanismo di sicurezza hardware è necessario un modello d...

PT-2026-109319

Name of the Vulnerable Software and Affected Versions Enclave OS Mini versions prior to wasm-v0.40.0 Description The SGX runtime's RA-TLS challenge certificate path incorrectly handles the quote ReportData by including the certificate public-key hash and client nonce but omitting a value bound to...

AlmaLinux 9.2 [TuxCare] Security Update: microcode_ctl (ALMALINUX9.2:CLSA-2026:1770215200)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1770215200 advisory. - Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable...

PRA-TLS: Attestation of a Client Application for TEE

Trusted Execution Environments TEEs are secure foundations for protecting sensitive information and executing computations over confidential data. Processing in an isolated execution environment enclave is invoked by an untrusted application in the Rich Execution Environment REE. Then the enclave...

Attestable Audit: Property-Based Attestation for Proprietary Workloads without Artifact Disclosure

Trusted Execution Environments TEEs prove the integrity of code and data to a remote peer through remote attestation: the TEE issues an attestation report by signing, with a hardware-bound key, its configuration information, including measurements cryptographic digests of the code loaded inside i...

Astra Linux – Vulnerability in Intel Microcode

Improper isolation of shared resources in some IntelR processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...

PT-2026-94126

Уязвимость реализации технологий конфиденциальных вычислений Intel TDX, Intel Scalable SGX и AMD SEV-SNP микропрограммного обеспечения процессоров Intel и AMD связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...

ROS-20260902-73-0015

The vulnerability of the EDECCSSA function in the Software Guard eXtensions SGX microprogramming software for Intel processors is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to cause service failures...