Intel SGX driver for Linux: Insufficient input validation in the out-of-tree SGX Linux driver lets a local

Impact

Insufficient input validation in the out-of-tree SGX Linux driver lets a local authenticated user deny service. Relevant on hosts still running the legacy Intel SGX DKMS driver rather than the in-kernel driver.

Who can reach it

Local authenticated user with access to the SGX device node.

What to do

Move to the in-kernel SGX driver where the kernel supports it, otherwise update the Intel SGX DKMS driver. Driver reload or reboot; no firmware or microcode.

References