oss-security - Nitro Enclaves kernel driver issue

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <5cae2a23-b169-43f6-0403-a316a1e661f9@amazon.com>
Date: Thu, 29 Apr 2021 21:11:44 +0300
From: "Paraschiv, Andra-Irina" <andraprs@...zon.com>
To: oss-security <oss-security@...ts.openwall.com>
CC: security <security@...nel.org>, linux-distros
	<linux-distros@...openwall.org>, ne-devel-upstream
	<ne-devel-upstream@...zon.com>, Mathias Krause <minipli@...ecurity.net>
Subject: Nitro Enclaves kernel driver issue

Hi,

An issue was found in the Nitro Enclaves kernel driver codebase [1] 
included in the v5.10 upstream Linux kernel. The fix for it has been 
tested on the AWS side. The issue does not break the isolation or 
security of what is running inside the enclave. Nitro Enclaves already 
assumes that the instance running the Nitro Enclaves kernel driver is 
untrusted.

We would like to thank Mathias Krause from Open Source Security, Inc. 
for reporting and providing a fix for this issue directly to AWS.

The patch [2] will be merged into the latest upstream Linux kernel 
release and into the v5.10+ stable kernel releases.

Thanks,
Andra

[1] 
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/drivers/virt/nitro_enclaves
[2] https://lore.kernel.org/lkml/20210429165941.27020-1-andraprs@amazon.com/

Amazon Development Center (Romania) S.R.L. registered office: 27A Sf. Lazar Street, UBC5, floor 2, Iasi, Iasi County, 700045, Romania. Registered in Romania. Registration number J22/2621/2005.

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.