Intel SGX Enclaves Were Prone To Crashes On Linux Under Heavy Memory Pressure

[phoronix]

Phoronix: Intel SGX Enclaves Were Prone To Crashes On Linux Under Heavy Memory Pressure

Intel's Software Guard Extensions (SGX) as security-related extensions to their processors that allow for protected memory enclaves has had a rather bouncy journey. Intel continues supporting SGX on their latest Xeon processors but on the client side have been deprecated since 11th Gen Core. Over the years SGX has been found vulnerable to various attacks from speculative execution exploits to Plundervolt. It also turns out under Linux until now was also open to crashing under memory pressure...

https://www.phoronix.com/scan.php?page=news_item&px=Intel-SGX-Linux-5.19

[Drago]

Basically, "same shit, different day".

[direc85]

Reminda mme about this project with two commits (not in master though):
* yolo
* make it a bit less yolo

[chuckula]

It was probably hard to diagnose because Linux tends to go right down the tubes for a variety of reasons under heavy memory pressure.

[horizonbrave]

Do you people enable SGX in the bios, disable it or leave to software requests?
Thanks