[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    [oss-security] Nitro Enclaves kernel driver issue
From:       "Paraschiv, Andra-Irina" <andraprs () amazon ! com>
Date:       2021-04-29 18:11:44
Message-ID: 5cae2a23-b169-43f6-0403-a316a1e661f9 () amazon ! com
[Download RAW message or body]

Hi,

An issue was found in the Nitro Enclaves kernel driver codebase [1] 
included in the v5.10 upstream Linux kernel. The fix for it has been 
tested on the AWS side. The issue does not break the isolation or 
security of what is running inside the enclave. Nitro Enclaves already 
assumes that the instance running the Nitro Enclaves kernel driver is 
untrusted.

We would like to thank Mathias Krause from Open Source Security, Inc. 
for reporting and providing a fix for this issue directly to AWS.

The patch [2] will be merged into the latest upstream Linux kernel 
release and into the v5.10+ stable kernel releases.

Thanks,
Andra

[1] 
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/drivers/virt/nitro_enclaves
 [2] https://lore.kernel.org/lkml/20210429165941.27020-1-andraprs@amazon.com/



Amazon Development Center (Romania) S.R.L. registered office: 27A Sf. Lazar Street, UBC5, floor \
2, Iasi, Iasi County, 700045, Romania. Registered in Romania. Registration number \
J22/2621/2005.


[prev in list] [next in list] [prev in thread] [next in thread]