The Patching Friars' AlmanacA calendar of CVE saints

August 8

DownfallHoly card for downfall, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 Downfall CADUNT VECTORES
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Downfall, Who Made the Vectors Fall

Patron of AVX instructions, registers shared with the neighbours, and microcode that slows everything down.

Life

On 8 August 2023 Daniel Moghimi of Google revealed that the gather instruction in Intel processors, from the sixth to the eleventh generation, speculatively leaked data left behind in the vector registers. A program could read keys and secrets from other processes, or from other virtual machines on the same core. The cure, a microcode update, came at a steep performance cost for some workloads.

Prayer

O Saint Downfall, who gathers what others left in the registers, let our vectors forget quickly. Amen.

How to celebrate

Celebrated by updating Intel microcode and measuring, with resignation, the benchmarks before and after.

Who gathers in haste gathers what isn't his.

Technical record

Disclosed on
August 8 2023
CVE
CVE-2022-40982
CVSS
6.5
Product
Intel(R) Processors

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Sources: downfall.page

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.