Intel Xeon memory controller configuration (with SGX): MULTI-TENANT ISOLATION: Incorrect default permissions on Xeon

Impact

MULTI-TENANT ISOLATION: Incorrect default permissions on Xeon memory controller configuration when SGX is in use, reachable by a privileged local user for escalation. Same advisory family as the conditions check issue and fixed by the same platform update.

Who can reach it

Privileged local access on the host.

What to do

OEM platform BIOS update, drain and reboot, then re-attest enclaves.

References