Summary
Guidance on which Linux kernel to use to get the latest SGX security and bug fixes.
Description
Unable to determine which Linux kernel to use to get the latest security and package bug fixes for Intel® SGX.
Resolution
When possible, use Linux kernel version 5.11+, which includes the in-kernel SGX driver. Otherwise, use the out-of-tree SGX driver.
When kernel 5.11 or newer is ubiquitous and shipping everywhere in the future, Intel will drop support for the standalone Datacenter and Attestation Primitives (DCAP) driver.