Intel SGX SDK (Edger8r code generator): The Edger8r tool generates the trusted/untrusted bridge code for enclaves

Impact

The Edger8r tool generates the trusted/untrusted bridge code for enclaves; an input-validation flaw here means the generated bridge itself can be unsafe. Every enclave built with the affected SDK inherits the problem.

Who can reach it

Local authenticated user against an enclave built with the affected generator.

What to do

Rebuild enclaves with a fixed SGX SDK and re-attest. Vendor-side fix; no operator reboot but also nothing you can patch yourself.

References