[PATCH v2 0/3][x/b/f/j/l linux] Fix minor regression in CVE-2022-40982
Tim Gardner
tim.gardner at canonical.com
Fri Sep 15 15:12:37 UTC 2023
v2: Add patches for Xenial, Bionic, Focal, Lunar
BugLink: https://bugs.launchpad.net/bugs/2034745
SRU Justification
[Impact]
In 5.15.0-1045, only loading enclaves with XFRM set to 3 works, sgx_encl_init returns
EINVAL. The only reason this wouldn't work properly is if sgx_drv_init thinks XSAVE
isn't enabled. This works fine in 5.15.0-1043.
Likely cause:
1045 adds this patch: https://github.com/torvalds/linux/commit/b81fac906a8f9e682e513ddd95697ec7a20878d4 .
This later patch indicates that the former patch introduced some ordering problems.
https://github.com/torvalds/linux/commit/2c66ca3949dc701da7f4c9407f2140ae425683a5 .
That later patch isn't applied to 1045.
[Test Plan]
User test results pending.
[Regression Potential]
SGX could continue to fail.
More information about the kernel-team
mailing list