The Patching Friars' AlmanacA calendar of CVE saints

August 1

GhostWriteHoly card for ghostwrite: official logo by Lea Mosbach (CC0 1.0), frame generated with AI (Claude, Anthropic).CC BY-NC-SA 4.0; logo CC0 1.0 GhostWrite SCRIBO ERGO ROOT
Official logo by Lea Mosbach (CC0 1.0) · 🤖 frame and text generated with AI

⬇ Download holy card: ·

⚔ Commemorated today: The Downfall of Knight Capital (2012)

Embed on your site

Saint GhostWrite, Who Wrote Where He Shouldn't

Patron of RISC-V processors, vector extensions, and ghosts who sign on your behalf.

Life

In the summer of 2024 researchers at CISPA found that some vector instructions in T-Head's XuanTie C910 and C920 cores wrote straight to physical memory, skipping virtual memory and with it every form of isolation. Any unprivileged program could write anywhere: into the kernel, into other processes, even into peripherals. Being a flaw in the silicon, no patch could erase it.

Prayer

O Saint GhostWrite, who writes with an invisible hand on other people's memory, let our instructions always go through the MMU. Amen.

How to celebrate

Celebrated by disabling the vector extension, giving up half the CPU to save the other half.

Write without a virtual address and you write everyone's fate.

Technical record

Disclosed on
August 1 2024
CVE
CVE-2024-44067
CVSS
8.4
Product
T-Head (Alibaba) · XuanTie C910 and C920 RISC-V CPUs

The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite.

Sources: ghostwriteattack.com

Commemorated today

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.