The Patching Friars' AlmanacA calendar of CVE saints

November 12

TAAHoly card for TAA, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 TSX TAA ABORTUS PRODIT
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint TAA, Who Aborted to Reveal the Secrets

Patron of TSX transactional memory, the CPU's internal buffers, and everyone who had just patched for MDS.

Life

On 12 November 2019 VUSec and Intel revealed TAA, TSX Asynchronous Abort: when a TSX transaction was aborted abruptly, the processor could leak, through speculative execution, leftover data in its internal buffers, the same ones hit by the MDS attacks. From an unprivileged program one could thus peek at other processes' data. The safest defence was to disable TSX entirely (CVE-2019-11135).

Prayer

O Saint TAA, who aborts the transaction and lets the secrets fall, let our buffers not empty into the wrong hands. Amen.

How to celebrate

Celebrated by updating the microcode and, where performance allows, disabling TSX.

Aborted transaction, escaped secret.

Technical record

Disclosed on
November 12 2019
CVE
CVE-2019-11135
CVSS
6.5
Product
2019.2 IPU – TSX Asynchronous Abort

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

Sources: mdsattacks.com · architecture.fail

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.