The Patching Friars' AlmanacA calendar of CVE saints

January 16

LeftoverLocalsHoly card for leftoverlocals, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 LeftoverLocals NIHIL DELETUR
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint LeftoverLocals, Keeper of Leftovers

Patron of GPUs that don't do the dishes, language models that talk too much, and anyone sharing a graphics card with strangers.

Life

On 16 January 2024 Trail of Bits showed that on Apple, AMD and Qualcomm GPUs local memory was not cleared between one program and the next. A curious process could gather the leftovers of another, up to reconstructing the answers of a language model running next door.

Prayer

O Saint LeftoverLocals, who feeds on other people's leftovers, teach our GPUs to clear the table after every kernel. Amen.

How to celebrate

Celebrated with a lunch of leftovers, updating GPU drivers between courses.

Who doesn't clear their memory serves it to the neighbours.

Technical record

Disclosed on
January 16 2024
CVE
CVE-2023-4969
CVSS
6.5
Product
Khronos Group · OpenCL

A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.

Sources: blog.trailofbits.com

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.