The Patching Friars' AlmanacA calendar of CVE saints

November 16

SmashExHoly card for smashex, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 SmashEx ARCA PERFRACTA
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint SmashEx, Who Broke Into the Enclave

Patron of SGX enclaves, exception handling, and everyone who thought the processor's vault was inviolable.

Life

On 16 November 2021 a group of researchers presented SmashEx: an SGX enclave, the sealed vault inside the processor, could be interrupted by an asynchronous exception just while it was in a fragile state. Re-entering during that instant corrupted the enclave's stack and ran code inside it, breaking its confidentiality and integrity. It affected several runtimes, Microsoft's Open Enclave SDK among them, which fixed the exception handling (CVE-2021-33767).

Prayer

O Saint SmashEx, who knocks at the enclave in its weakest moment, let our vault not open the door mid-gesture. Amen.

How to celebrate

Celebrated by updating the SGX runtimes and making exception-handling re-entry safe.

Interrupt at the right moment and you enter where none may.

Technical record

Disclosed on
November 16 2021
CVE
CVE-2021-33767CVE-2021-0186
CVSS
8.2
Product
Microsoft · Open Enclave SDK

Open Enclave SDK Elevation of Privilege Vulnerability

Sources: jasonyu1996.github.io

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.