The Patching Friars' AlmanacA calendar of CVE saints

Patron of November 11

VoltJockeyHoly card for voltjockey, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 V VoltJockey TENSIO FALLIT
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint VoltJockey, Who Rode the Voltage

Patron of CPUs with voltage scaling, TrustZone secure worlds, and those who play with millivolts.

Life

In 2019 the researchers behind VoltJockey showed that lowering the processor's voltage a little, through the software interface that tunes its frequency and voltage, could make it miscalculate at just the right moment. With these controlled faults they extracted cryptographic keys and broke the integrity of secure worlds like TrustZone and, in parallel variants, SGX. Intel and others fixed it by restricting access to voltage control (CVE-2019-11157).

Prayer

O Saint VoltJockey, who bends the voltage to the point of error, let our processors always compute at honest voltage. Amen.

How to celebrate

Celebrated by updating BIOS and microcode to lock voltage control away from software.

Lower the voltage and you harvest errors.

Technical record

Disclosed on
November 11 2019
CVE
CVE-2019-11157
Product
Intel(R) Processors

Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access.

Sources: voltjockey.com · web.archive.org

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.