[regression] Unable to initialize SGX enclaves with XFRM other than 3
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Focal |
Fix Released
|
Undecided
|
Tim Gardner | ||
Jammy |
Fix Released
|
Medium
|
Tim Gardner | ||
Lunar |
Fix Released
|
Undecided
|
Tim Gardner |
Bug Description
SRU Justification
[Impact]
In 5.15.0-1045, only loading enclaves with XFRM set to 3 works, sgx_encl_init returns EINVAL. The only reason this wouldn't work properly is if sgx_drv_init thinks XSAVE isn't enabled. This works fine in 5.15.0-1043.
Likely cause:
1045 adds this patch: https:/
[Test Plan]
User test results pending, but its a fix commit so should likely be applied regardless.
[Regression Potential]
SGX could continue to fail.
affects: | linux-signed-azure-5.15 (Ubuntu) → linux-azure (Ubuntu) |
affects: | linux-azure (Ubuntu) → linux (Ubuntu) |
description: | updated |
description: | updated |
Changed in linux (Ubuntu Jammy): | |
assignee: | nobody → Tim Gardner (timg-tpi) |
importance: | Undecided → Medium |
status: | New → In Progress |
Changed in linux (Ubuntu): | |
status: | Incomplete → Fix Released |
Changed in linux (Ubuntu Lunar): | |
status: | New → Fix Committed |
Changed in linux (Ubuntu Jammy): | |
status: | In Progress → Fix Committed |
Changed in linux (Ubuntu Lunar): | |
assignee: | nobody → Tim Gardner (timg-tpi) |
Changed in linux (Ubuntu Focal): | |
status: | New → Fix Committed |
assignee: | nobody → Tim Gardner (timg-tpi) |
tags: |
added: verification-done-focal-linux removed: verification-needed-focal-linux |
tags: |
added: verification-done-jammy-linux removed: verification-needed-jammy-linux |
Please try the referenced kernel jammy-azure- 5.15.0- 1049.56~ lp2034745. 1.tgz with the fix commit. Note that this kernel is not signed for a UEFI secure boot environment.