Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Non FLC SGX device, Linux Kernel 5.15 #153

Open
rdockterjr opened this issue Aug 2, 2023 · 0 comments
Open

Non FLC SGX device, Linux Kernel 5.15 #153

rdockterjr opened this issue Aug 2, 2023 · 0 comments

Comments

@rdockterjr
Copy link

For various reasons I'm trying to upgrade my system to Ubuntu 22.04 with linux kernel 5.15. My CPU does not support Flexible Launch Control according to cpuid:

Extended feature bits (EAX=07H, ECX=0H)
eax: 0 ebx: 29c67af ecx: 0 edx: bc002e00
sgx available: 1
sgx launch control: 0

So I'm trying to install the isgx driver. The driver installs just fine both from https://download.01.org/intel-sgx/ as well as if I builld the driver from source. However upon reboot the sgx device does not seem to load properly and dmesg gives me the following output:

[ 0.418012] sgx: EPC section 0x70200000-0x75f7ffff
[ 4.180975] isgx: loading out-of-tree module taints kernel.
[ 4.181011] isgx: module verification failed: signature and/or required key missing - tainting kernel
[ 4.181318] intel_sgx: Intel SGX Driver v2.11.0
[ 4.181326] UBSAN: shift-out-of-bounds in ./linux-sgx-driver/sgx_main.c:224:11
[ 4.181352] sgx_drv_probe.cold+0x1db/0x55b [isgx]
[ 4.181379] ? sgx_drv_probe+0x130/0x130 [isgx]
[ 4.181384] init_sgx_module+0x2f/0x90 [isgx]
[ 4.181450] intel_sgx INT0E0C:00: EPC bank 0x70200000-0x75f80000
[ 4.182815] intel_sgx: can not reset SGX LE public key hash MSRs
[ 4.182873] intel_sgx: second initialization call skipped`

I'm assuming the shift-out-of-bounds out of bounds issue is my problem Has any one else experienced this? Is it just not possible to run older isgx devices on the newest linux kernels?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant