Intel Xeon memory controller configuration (with SGX): MULTI-TENANT ISOLATION: An improper conditions check in Xeon

Impact

MULTI-TENANT ISOLATION: An improper conditions check in Xeon memory controller configuration under SGX gives a privileged local user privilege escalation. Highest-scored of the memory-controller-plus-SGX family and the one to prioritise if you run SGX on Xeon.

Who can reach it

Privileged local access on the host.

What to do

OEM platform BIOS update plus TCB recovery and re-attestation. Drain and reboot per node; OEM availability is the long pole.

References