CVE-2021-33135: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability identified as CVE-2021-33135 was discovered in the Linux kernel drivers for Intel(R) Software Guard Extensions (SGX). The issue was disclosed on May 12, 2022, and affects Intel SGX software versions up to and including 2.14 on Linux systems. The vulnerability stems from uncontrolled resource consumption in the kernel drivers (NVD, Intel Advisory).

The vulnerability has been classified as CWE-400 (Uncontrolled Resource Consumption). According to the National Vulnerability Database, it received a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. Under CVSS v2.0, it was rated with a Base Score of 2.1 (LOW) with the vector (AV:L/AC:L/Au:N/C:N/I:N/A:P) (NVD).

The vulnerability can lead to denial of service conditions when successfully exploited. The impact is limited to availability, with no direct effect on confidentiality or integrity of the system (NVD).

The vulnerability has been addressed in various Linux distributions. Debian has marked this as fixed in multiple releases including bullseye (5.10.234-1), bookworm (6.1.128-1), and sid/trixie (6.12.17-1). A kernel fix was also implemented in version 5.17-rc8 (Debian Tracker).