The Patching Friars' AlmanacA calendar of CVE saints

October 8

SamFAILHoly card for samfail, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 SamFAIL NOTA OCTO APERTA
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint SamFAIL, Who Opened the Galaxy Note 8

Patron of bootloaders that don't check, the XDA forums, and people who just wanted a little root on their new phone.

Life

In October 2017, a few weeks after launch, XDA user me2151 published a way to root Snapdragon-based Galaxy Note 8 phones, until then considered impregnable. The bootloader for the Qualcomm MSM8998 chip did not verify the integrity of the system image, which could be swapped for a modified one and booted with root privileges. Samsung fixed it in the November bulletin; the name, SamFAIL, had already said it all.

Prayer

O Saint SamFAIL, who opened what should have stayed sealed, let our bootloaders check what they boot. Amen.

How to celebrate

Celebrated by installing the November 2017 Samsung security update, or by giving up on root with dignity.

If you don't check what you boot, someone else picks it for you.

Technical record

Disclosed on
October 8 2017
CVE
CVE-2017-18649

An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can boot a device with root privileges because the bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, aka the "SamFAIL" issue. The Samsung ID is SVE-2017-10465 (November 2017).

Sources: xdaforums.com · androidcommunity.com

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.