The Patching Friars' AlmanacA calendar of CVE saints

Patron of June 15

Collateral DamageHoly card for collateral-damage, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 SystemOS Collateral Damage DAMNUM LUDENS
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Collateral Damage, Who Opened the Console Without Asking

Patron of game consoles, homebrew, and Windows vulnerabilities that turn up where nobody expects them.

Life

In 2024 Emma Kirkpatrick, with Lander Brandt of Solstice, released a kernel exploit for Xbox One and Xbox Series built on CVE-2024-30088, a Windows kernel race condition patched in June. Launched from a scripting app, it gave full control of SystemOS, the virtual machine where apps run, without developer mode. It was no game jailbreak, and it was temperamental: when it failed, the console rebooted. The collateral damage, so to speak, of a PC patch.

Prayer

O Saint Collateral Damage, who crosses from PC to console like an unexpected guest, let our shared systems share their updates too. Amen.

How to celebrate

Celebrated by updating the console and playing a game, since someone else has already opened the kernel anyway.

A patch for the PC, a surprise in the living room.

Technical record

Disclosed on
June 15 2024
CVE
CVE-2024-30088
CVSS
7.0Actively exploited (CISA KEV)
Product
Microsoft · Windows 10 Version 1507

Windows Kernel Elevation of Privilege Vulnerability

Sources: github.com

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.