Linux Plumbers Conference 2026

Attested TLS for Confidential AI Agents: Insights and Lessons Learnt from High- and Critical-severity CVEs on Early Attestation

5 Oct 2026, 10:45

45m

"Club D" (Prague Congress Centre)

Birds of a Feather (BoF) Birds of a Feather (BoF)

Speaker

Muhammad Usama Sardar (TU Dresden)

Description

We aim to bootstrap some discussions on the intersections of the following topics:

• Agentic AI
• Confidential Computing (MC on this already exists)
• Attestation
• Attested TLS

To initiate discussion, we will present a few slides to introduce the above, then pose some open questions. We very much welcome presentations by attendees on related topics. If you are interested in presenting, please email me with the title and expected time.

We will share insights from the several CVEs and GitHub Security Advisories (GHSAs) on Early Attestation. In particular, we will share our discovered critical-severity CVEs, such as CVE-2026-92701, CVE-2026-92702, CVE-2026-100835, each of CVSS 9.1, and other critical- and high-severity security concerns against early attestation, and discuss with the community whether early attestation is really necessary.

Presentation materials

EarlyAttestationBleed: Three Critical-severity Vulnerabilities of CVSS ≥ 9.0 in Confidential Computing

Early Attestation Considered Very Harmful

Slides

ID-Crisis

Formal analysis for ID-Crisis

Paper: Identity Crisis in Confidential Computing: Formal Analysis of Attested TLS

Intra-handshake.fail (CVE-2026-33697)

Formal analysis for relay attacks (CVE-2026-33697)

Paper: Intra-handshake.fail (CVE-2026-33697): High-severity CVE in Attested TLS