Linux Kernel x86/SGX Offset-Length Validation Overflow Vulnerability

A vulnerability in the Linux kernel's handling of Intel Software Guard Extensions (SGX) has been addressed. The issue was in the 'sgx_validate_offset_length()' function, which checks 'offset' and 'length' parameters from userspace. The function lacked a proper overflow check on the addition of these parameters, potentially leading to unintended behavior. This vulnerability has been resolved by adding the necessary overflow check.

Impact

The vulnerability could have allowed for an overflow condition in the offset and length validation, potentially leading to memory corruption or other unintended consequences.