ALSA-2026:18868 Important: linux-sgx security update

The Intel SGX SDK is a collection of APIs, libraries, documentations and tools that allow software developers to create and debug Intel SGX enabled applications in C/C++. Security Fixes: qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-15284 node-tar: tar: node-ta...

CVE-2022-26841

Insufficient control flow management for the IntelR SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-26509

Improper conditions check in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-27499

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

EUVD-2019-5727

Malware in sbrugna...

EUVD-2019-0929

Malware in sbrugna...

EUVD-2021-11032

Malware in sbrugna...

EUVD-2019-5726

Malware in sbrugna...

EUVD-2018-9836

Malware in sbrugna...

EUVD-2018-15480

Malware in sbrugna...

EUVD-2020-2059

Malware in sbrugna...

EUVD-2024-35044

Malicious code in bioql PyPI...

EUVD-2021-2805

Malicious code in bioql PyPI...

EUVD-2022-32000

Malicious code in bioql PyPI...

EUVD-2022-31067

Malicious code in bioql PyPI...

EUVD-2022-31391

Malicious code in bioql PyPI...

CVE-2024-34776

Out-of-bounds write in some IntelR SGX SDK software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0186

Improper input validation in the IntelR SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access...

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

CVE-2019-14565

Insufficient initialization in IntelR SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...