The Patching Friars' AlmanacA calendar of CVE saints

Feast day September 15

PhoenixHoly card for phoenix, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 Phoenix EX CINERE SURGIT
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Phoenix, Who Rose From the Ashes of DDR5

Patron of DDR5 memory modules, anti-Rowhammer defences, and everyone who thought modern memory was safe.

Life

On 15 September 2025 the COMSEC group at ETH Zurich, with Google, revealed Phoenix, a Rowhammer attack on SK Hynix DDR5 memory. By synchronising the hammering with the rhythm of the in-DRAM defences, it produced bit flips even where protections were thought solid, and on an ordinary PC reached root privileges in under two minutes. Like the phoenix, Rowhammer rose again from its own ashes.

Prayer

O Saint Phoenix, who rise with every new generation of memory, let our DIMMs be patched faster than your patterns. Amen.

How to celebrate

Celebrated by tripling the refresh rate where needed and awaiting per-row activation counters in future silicon.

A new defence, a reborn phoenix.

Technical record

Disclosed on
September 15 2025
CVE
CVE-2025-6202
CVSS
7.1
Product
SK Hynix · DDR5

Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12.

Sources: comsec.ethz.ch

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.