Get the latest tech news
Intel SGX With Linux 6.16 Less Likely To Cause Fatal Machine Checks
Intel's Software Guard Extensions (SGX) updates for the in-development Linux 6.16 contain a fix so SGX is now less likely to cause a fatal machine check.
Specifically, reclaiming uses microcode operations including "EWB" which accesses the EPC page contents to encrypt and write them out to non-SGX memory. Those operations cannot handle MCEs in their accesses other than by putting the executing core into a special shutdown state (affecting both threads with HT.) This also doesn't completely close the time window when a memory error notification will be fatal (for a not previously poisoned EPC page) -- the MCE can happen after sgx_reclaim_pages() has selected its candidates or even *inside* a microcode operation (actually easy to trigger due to the amount of time spent in them.)"
Or read this on Phoronix
