The Patching Friars' AlmanacA calendar of CVE saints

January 3

MeltdownHoly card for meltdown: official logo by Natascha Eibl (CC0 1.0), frame generated with AI (Claude, Anthropic).CC BY-NC-SA 4.0; logo CC0 1.0 Meltdown SPECULARE HUMANUM EST
Official logo by Natascha Eibl (CC0 1.0) · 🤖 frame and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Meltdown, Who Melted the Wall Between User and Kernel

Patron of over-optimistic processors and sysadmins who watched performance drop after the patch.

Life

Revealed to the world on 3 January 2018 together with his brother Spectre, with a logo and a website as befits a modern saint. He taught that a processor, to go fast, reads ahead even what it shouldn't, and that the secret stays imprinted in the cache. To exorcise him, operating systems had to separate kernel memory from program memory, in a rite called KPTI.

Prayer

O Saint Meltdown, who read kernel memory without permission, teach our processors that speculation is no sin only as long as it leaves no trace. Amen.

How to celebrate

Celebrated by updating microcode and kernel, and looking resignedly at the next day's benchmarks.

Slow and steady wins the race; speculate, and you leave a trace.

Technical record

Disclosed on
January 3 2018
CVE
CVE-2017-5754
CVSS
5.6
Product
Intel Corporation · Most Modern Operating Systems

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

Sources: meltdownattack.com · architecture.fail

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.