Enclave OS Mini: SGX RA-TLS quote omits a session-bound value, allowing quote relay

Impact

Enclave OS Mini is the SGX-based runtime for confidential workloads, and the same ReportData omission as its TDX sibling applies here: the quote covers the certificate public-key hash and client nonce but nothing bound to the active TLS session. An attacker holding an enclave TLS private key can relay a genuine SGX quote onto a connection they control, and the relying party treats the attacker-terminated channel as the attested enclave. For an operator this breaks the one guarantee the attestation was bought for - that data entering the channel only lands inside measured enclave code. Tracked separately from the TDX runtime (CVE-2026-108268) because it is a different product, repository and fixed version.

Who can reach it

Network attacker able to terminate a TLS connection to a relying party, in possession of an enclave TLS private key. No credentials against the enclave are required.

What to do

Upgrade the SGX runtime to wasm-v0.40.0 and redeploy the enclaves, then update the relying-party verifiers in the same window - patching only one side leaves the relay working. Rotate enclave TLS keys of unknown exposure. No microcode or platform firmware change is called for by the advisory.

References

Related entries

• Enclave OS Virtual: RA-TLS quote not bound to the TLS session, so an attestation can be relayedCVE-2026-108268 · Privasys Enclave OS Virtual (TDX / TDX-GPU RA-TLS certificate issuer)Critical
• Linux kernel - RDMA/rxe (Soft-RoCE) receive path, drivers/infiniband/sw/rxe/rxe_recv.c: Rxe_rcv() checked only that anCVE-2026-46043 · Linux kernel - RDMA/rxe (Soft-RoCE) receive path, drivers/infiniband/sw/rxe/rxe_recv.cCritical
• Linux kernel - SRP (SCSI RDMA Protocol) initiator, drivers/infiniband/ulp/srp/ib_srp.c: The SRP initiator copied theCVE-2026-53186 · Linux kernel - SRP (SCSI RDMA Protocol) initiator, drivers/infiniband/ulp/srp/ib_srp.cCritical
• Dell SmartFabric OS10 before 10.6.1.3: code downloaded without integrity check allows code executionCVE-2026-63696 · Dell SmartFabric OS10 (code download without integrity check)Critical
• Linux kernel - RDMA/rtrs server (RDMA Transport, used by RNBD block storage), drivers/infiniband/ulp/rtrs/rtrs-srv.cCVE-2026-64269 · Linux kernel - RDMA/rtrs server (RDMA Transport, used by RNBD block storage), drivers/infiniband/ulp/rtrs/rtrs-srv.cCritical
• AMD Secure Processor (Ryzen / Ryzen Pro / Ryzen Mobile): Insufficient access control on the Secure Processor lets codeCVE-2018-8931 · AMD Secure Processor (Ryzen / Ryzen Pro / Ryzen Mobile)Critical