sgxray

SGXRay：自动检测 SGX 应用程序的漏洞 Intel SGX 通过基于硬件的内存加密，保护隔离的应用程序逻辑和飞地内的敏感数据。要使用这种基于硬件的安全机制，需要对内存使用采用严格的编程模型，并使用穿越飞地边界的复杂 API。飞地开发人员必须小心谨慎地编程以确保飞地安全，尤其是在处理跨越飞地可信边界的数据时。可信边界违规可能进一步导致内存损坏，并可能被攻击者利用以检索和操纵受保护的数据。目前，没有公开可用的工具能够有效检测真实飞地中的此类问题。 SGXRay 是一个基于 SMACK 验证器的自动化推理工具，能够自动检测源于可信边界违规的 SGX...

v0ltpwn

V0LTpwn V0LTpwn CVE-2019-11157 es un ataque de fallo controlado por software en procesadores x86. Es el primer ataque que corrompe la integridad de los enclaves SGX. Descripción Todos los procesadores Intel recientes presentan una interfaz de software para controlar los voltajes del núcleo sin...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013705 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/apic: Don't disable x2APIC if locked The APIC supports two modes, legacy APIC or xAPIC, and...

EUVD-2019-8346

Malware in sbrugna...

SUSE CVE-2025-38334

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Prevent attempts to reclaim poisoned pages TL;DR: SGX page reclaim touches the page to copy its contents to secondary storage. SGX instructions do not gracefully handle machine checks. Despite this, the existing SGX code...

AZL-72587 CVE-2025-38334 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Prevent attempts to reclaim poisoned pages TL;DR: SGX page reclaim touches the page to copy its contents to secondary storage. SGX instructions do not gracefully handle machine checks. Despite this, the existing SGX code...

openSUSE: Security Advisory for ucode (SUSE-SU-2022:2960-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2023-52568

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race The SGX EPC reclaimer ksgxd may reclaim the SECS EPC page for an enclave and set secs.epcpage to NULL. The SECS page is used for EAUG and ELDU in the SGX page fault...

Side Channel Attack

github.com/containerd/containerd is vulnerable to Side Channel Attack. The vulnerability is caused due to an unprivileged access to Intel's RAPL Running Average Power Limit readings which provides software insights into hardware energy consumption. This can be exploited to mount power-based...

SUSE-SU-2022:2960-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release bsc1201727: - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave INTEL-SA-00657. See also:...

SUSE-SU-2022:2838-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release bsc1201727: - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave INTEL-SA-00657. See also:...

SUSE: Security Advisory (SUSE-SU-2022:2832-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2833-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release bsc1201727: - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave INTEL-SA-00657. See also:...

SUSE-SU-2022:2832-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release bsc1201727: - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave INTEL-SA-00657. See also:...

Synaptics Fingerprint Driver 缓冲区错误漏洞

Synaptics Fingerprint Driver is a regional touch and swipe fingerprint driver from Synaptics, Inc. The Synaptics Fingerprint Driver suffers from a buffer error vulnerability that originates from allowing a local attacker to send crafted commands to the driver's SGX Enclave to overwrite heap memor...

Researchers Break Intel SGX With New 'SmashEx' CPU Attack Technique

A newly disclosed vulnerability affecting Intel processors could be abused by an adversary to gain access to sensitive information stored within enclaves and even run arbitrary code on vulnerable systems. The vulnerability CVE-2021-0186, CVSS score: 8.2 was discovered by a group of academics from...

Vulnerabilities in processors fixed

Researchers have found vulnerabilities in several processors. The vulnerabilities marked CVE-2020-8694 and CVE-2020-8695 have been named Platypus, an acronym for Power Leakage Attacks: Targeting Your Protected User Secrets. The vulnerabilities allow a local malicious person to obtain obtain...

CVE-2020-8695

A vulnerability was found in Intel's implementation of RAPL Running Average Power Limit. An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem. Mitigation Until a firmwar...

Information Disclosure

Arm Mbed TLS is vulnerable to Information Disclosure. An attacker that can get precise enough side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinate of the result of scalar multiplication by exploiting side channels in the conversion to...

CVE-2019-18619

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave all versions prior to 2019-11-15 allows a local user to execute arbitrary code in the enclave that can compromise confidentiality of enclave data via APIs that accept invalid pointers...