-
CVE-2024-36353: CROSS-PROCESS GPU MEMORY DISCLOSURE (27-02-2025)
Preface: Regarding its use in HPC clusters, the Radeon PRO V710 is indeed suitable. It is supported by AMD’s ROCm platform, which is optimized for HPC and AI workloads. Additionally, it is used in Azure’s NVads V710 v5-series virtual machines, which are designed for GPU-accelerated applications, including HPC. Background: The global memory of the AMD…
-
CVE-2024-0148: NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode (25-02-2025)
Preface: NVIDIA IGX Orin software is used by a variety of organizations, particularly those in industrial and medical environments. This platform is designed to support AI applications at the edge, providing high performance, advanced functional safety, and security. Some specific use cases include: The platform’s versatility and robust support make it suitable for any organization…
-
Python , have ever you though? (25-02-2025)
Preface: Maintaining a satellite’s orbit involves a combination of precise calculations and regular adjustments. Here are the key factors: Background: The PyEphem module provides highly precise data on the planets and our solar system. This module leverages an extremely robust C library that allows you to pinpoint planets, perform interplanetary calculations and discover more data…
-
When the Sumerian advanced civilization met Cray HPC
(24-02-2025) Preface: Is linear algebra used in real life? An example of where there is a lot of research on these things is in sparse matrix analysis, which comes up a lot in real world applications of linear algebra. For some buzzwords, popular topics like machine learning, neural networks, and computer graphics all use huge…
-
CVE-2024-46975 : GPU DDK – rgxfw_write_robustness_buffer allows arbirtary catreg set mapping (23rd Feb 2025)
Preface: A Memory Management Unit (MMU) is the hardware system which performs both virtual memory mapping and checks the current privilege to keep user processes separated from the operating system — and each other. In addition it helps to prevent caching of ‘volatile’ memory regions (such as areas containing I/O peripherals. Background: Generally speaking, GPU…
-
CVE‑2024‑53870, CVE‑2024‑53871, CVE‑2024‑53872, CVE‑2024‑53873, CVE‑2024‑53874, CVE‑2024‑53875, CVE‑2024‑53876, CVE‑2024‑53877, CVE‑2024‑53878 and CVE‑2024‑53879 (21-02-2025)
Released on February 18, 2025 Preface: In NVIDIA CUDA, cuobjdump and nvdisasm are two binary utilities used for examining and disassembling CUDA binaries (cubin files). cuobjdump nvdisasm These tools are essential for developers who need to inspect and debug the compiled CUDA code. Background: Parallel processing is a method in computing of running two or…
-
CVE-2024-57258 – Integer overflows in memory allocation in Das U-Boot (19-02-2025)
Preface: U-Boot is both a first-stage and second-stage bootloader. It is loaded by the system’s ROM (e.g. on-chip ROM of an ARM CPU) from a supported boot device, such as an SD card, SATA drive, NOR flash (e.g. using SPI or I²C), or NAND flash. Background: Das U-Boot is an open source, primary boot loader…
-
nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085) 17-02-2025
Preface: If artificial intelligence could create the world. Do you know how his creation differs from Genesis? Artificial intelligence focuses on efficiency, and everything needs to be fast. But God is concerned with the balance of nature. Therefore, the development of everything is not rapid. Background: HTTP/2 enables full request and response multiplexing. In practice,…
-
Cache-based Side-Channel Attack Against SEV (18th Feb 2024)
Originally posted by AMD 3rd Feb 2025 Updated Acknowledgement – 2025-02-17 Preface: FIPS 186-5 removes DSA as an approved digital signature algorithm “due to a lack of use by industry and based on academic analyses that observed that implementations of DSA may be vulnerable to attacks if domain parameters are not properly generated. February 3,…
-
CVE-2024-0112 – about NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software (17th Feb 2025)
The original security advisory was issued on February 11, 2025. Preface: NVIDIA IGX Orin software is used by a variety of organizations, particularly those in industrial and medical environments. This platform is designed to support AI applications at the edge, providing high performance, advanced functional safety, and security. Some specific use cases include: The platform’s…