# CVE-2023-52568: linux: In the Linux kernel, the following vulnerability has been resolved:  x86/sgx: Resolves SECS reclaim vs

CVE-2023-52568 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-52568, released March 2, 2024. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2023-52568
- Priority: Routine
- CVSS: 4.7 (medium)
- EPSS: 0.0023
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 2, 2024

## Description

In the Linux kernel, the following vulnerability has been resolved:  x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race  The SGX EPC reclaimer (ksgxd) may reclaim the SECS EPC page for an enclave and set secs.epc_page to NULL. The SECS page is used for EAUG and ELDU in the SGX page fault handler. However, the NULL check for secs.epc_page is only done for ELDU, not EAUG before being used.  Fix this by doing the same NULL check and reloading of the SECS page as needed for both EAUG and ELDU.  The SECS page holds global enclave metadata. It can only be reclaimed when there are no other enclave pages remaining. At that point, virtually nothing can be done with the enclave until the SECS page is paged back in.  An enclave can not run nor generate page faults without a resident SECS page. But it is still possible for a #PF for a non-SECS page to race with paging out the SECS page: when the last resident non-SECS page A triggers a #PF in a non-resident page B, and then page A and the SECS both are paged out before the #PF on B is handled.  Hitting this bug requires that race triggered with a #PF for EAUG. Following is a trace when it happens.  BUG: kernel NULL pointer dereference, address: 0000000000000000 RIP: 0010:sgx_encl_eaug_page+0xc7/0x210 Call Trace:  ? __kmem_cache_alloc_node+0x16a/0x440  ? xa_load+0x6e/0xa0  sgx_vma_fault+0x119/0x230  __do_fault+0x36/0x140  do_fault+0x12f/0x400  __handle_mm_fault+0x728/0x1110  handle_mm_fault+0x105/0x310  do_user_addr_fault+0x1ee/0x750  ? __this_cpu_preempt_check+0x13/0x20  exc_page_fault+0x76/0x180  asm_exc_page_fault+0x27/0x30

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 12.15 (bookworm) | 6.1.64-1 | [DEBIAN-CVE-2023-52568](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52568.md) | Mar 2, 2024 |
| Linux | linux Debian 13.5 (trixie) | 6.5.6-1 | [DEBIAN-CVE-2023-52568](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52568.md) | Mar 2, 2024 |
| Linux | linux Debian 14 | 6.5.6-1 | [DEBIAN-CVE-2023-52568](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52568.md) | Mar 2, 2024 |

---

Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.