The Patching Friars' AlmanacA calendar of CVE saints

Patron of August 14

ForeshadowHoly card for foreshadow: official logo by Natascha Eibl (CC0 1.0), frame generated with AI (Claude, Anthropic).CC BY-NC-SA 4.0; logo CC0 1.0 Foreshadow PRAESCIENTIA L1
Official logo by Natascha Eibl (CC0 1.0) · 🤖 frame and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Foreshadow, Who Read the Enclaves' Future

Patron of SGX enclaves, the L1 cache, and hypervisors that share too much with the neighbours.

Life

On 14 August 2018 two groups of researchers, spanning KU Leuven, Technion, the University of Michigan and the University of Adelaide, revealed a new speculative execution attack on Intel processors. By exploiting a flaw called L1 Terminal Fault, they could read data from SGX enclaves, including their attestation keys. The later variants, called Foreshadow-NG, also hit operating systems and virtual machines.

Prayer

O Saint Foreshadow, who foresees secrets before they are asked for, let our L1 cache be flushed every time we change rooms. Amen.

How to celebrate

Celebrated by updating microcode, operating system and hypervisor and, where needed, disabling hyper-threading with a sigh.

Speculate on the future and you read other people's present.

Technical record

Disclosed on
August 14 2018
CVE
CVE-2018-3615
CVSS
7.3
Product
Intel Corporation · Multiple

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

Sources: foreshadowattack.eu · architecture.fail

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.