The Patching Friars' AlmanacA calendar of CVE saints

May 16

ZombieLoadHoly card for zombieload: official logo by Natascha Eibl (CC0 1.0), frame generated with AI (Claude, Anthropic).CC BY-NC-SA 4.0; logo CC0 1.0 ZombieLoad DATA REDIVIVA
Official logo by Natascha Eibl (CC0 1.0) · 🤖 frame and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint ZombieLoad, Who Raised Other People's Data

Patron of Intel processors, internal buffers that never flush, and secrets that return from the grave.

Life

On 14 May 2019 researchers from TU Graz, imec-DistriNet and others presented ZombieLoad, one of the speculative-execution "MDS" attacks on Intel processors. During certain operations, the CPU's small internal buffers held on to data from other programs, and an attacker could make it "rise again" and spy on it, even across the barriers between processes and virtual machines. The defence required microcode, updates and, in some cases, disabling hyper-threading.

Prayer

O Saint ZombieLoad, who recalls the data the CPU thought buried, let our buffers empty before they change masters. Amen.

How to celebrate

Celebrated by updating microcode and the operating system, and weighing whether hyper-threading is worth the risk.

Data not buried well comes back to visit.

Technical record

Disclosed on
May 16 2019
CVE
CVE-2018-12130CVE-2019-11135
CVSS
6.5
Product
Intel Corporation · Central Processing Units (CPUs)

Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Sources: zombieloadattack.com

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.