In the Linux kernel, the following vulnerability has been resolved:
x86/sgx: Fix deadlock in SGX NUMA node search
When the current node doesn't have an EPC section configured by firmware and all other EPC sections are used up, CPU can get stuck inside the while loop that looks for an available EPC page from remote nodes indefinitely, leading to a soft lockup. Note how nid_of_current will never be equal to nid in that while loop because nid_of_current is not set in sgx_numa_mask.
Also worth mentioning is that it's perfectly fine for the firmware not to setup an EPC section on a node. While setting up an EPC section on each node can enhance performance, it is not a requirement for functionality.
Rework the loop to start and end on *a* node that has SGX memory. This avoids the deadlock looking for the current SGX-lacking node to show up in the loop when it never will.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Feb 11, 2025 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04 | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub