-
Privilege Desynchronization: Cross-Privilege Spectre Attacks with Branch Privilege Injection – Part 2 (14-05-2025)
Preface: Before reading the detailed information, it is recommended to read Part 1 first. Privilege Desynchronization: Cross-Privilege Spectre Attacks with Branch Privilege Injection (Part 1) – http://www.antihackingonline.com/under-our-observation/privilege-desynchronization-cross-privilege-spectre-attacks-with-branch-privilege-injection-14-05-2025/ Technical details: It is to ensure the serialization of memory access. The internal operation is to add some delays in a series of memory accesses to ensure that…
-
Privilege Desynchronization: Cross-Privilege Spectre Attacks with Branch Privilege Injection (14-05-2025)
Preface: Enhanced IBRS (eIBRS) and Automatic IBRS (AutoIBRS) are features designed to mitigate the Spectre V2 vulnerability, which affects speculative execution in CPUs. Background: AutoIBRS is a similar feature introduced by AMD in their Zen 4 processors. It automatically manages IBRS mitigation resources across privilege level transitions, offering better performance compared to Retpoline. This feature…
-
CVE-2025-21460: Improper Input Validation in Automotive Software platform based on QNX. (13th May 2025)
Preface: As of June 26, 2023, QNX software is now embedded in over 255 million vehicles worldwide, including most leading OEMs and Tier 1s, such as BMW, Bosch, Continental, Dongfeng Motor, Geely, Ford, Honda, Mercedes-Benz, Subaru, Toyota, Volkswagen, Volvo, and more. Background: In Automotive Ethernet Audio Video Bridging (eAVB), reliable communication is not limited to…
-
About CVE-2025-37889 – ASoC framework Consistently treat platform_max as control value (12th May 2025)
Preface: The overall project goal of the ALSA System on Chip (ASoC) layer is to provide better ALSA support for embedded system-on-chip processors. Advanced Linux Sound Architecture (ALSA) is a software framework and part of the Linux kernel that provides an application programming interface (API) for sound card device drivers. Background: The snd_soc_put_volsw() function is…
-
CVE-2025-37834: About Linux vmscan[.]c (8th May 2025)
Preface: All systems based on the Linux kernel utilize the vmscan[.]c file for memory management. This file is integral to the kernel’s memory reclamation process, ensuring efficient use of system memory across various Linux distributions. Background: The vmscan[.]c file in the Linux kernel is responsible for managing memory reclamation. It contains functions that help the…
-
CVE-2024-49835 – Out-of-bounds Write in SPS Applications (8th May 2025)
Preface: Semi-Persistent Scheduling (SPS) is used in LTE and 5G networks to reduce control channel overhead for applications requiring persistent radio resource allocations, such as VoIP and VoLTE . The memory usage for SPS on Android devices can vary based on several factors, including the specific implementation and the network conditions. A method and apparatus…
-
Mali GPU Driver Security Bulletin: CVE-2025-0427
(7th May 2025) Last updated: 2 May 2025 (official) Preface: An ioctl interface is a single system call by which userspace may communicate with device drivers. Requests on a device driver are vectored with respect to this ioctl system call, typically by a handle to the device and a request number. Background: The Arm Mali…
-
CVE-2024-49739 – GPU DDK misuse ptrace system call (6th May 2025)
Official release posted: 2nd May 2025 Since the manufacturer did not provide a detailed description, is the situation discovered by the manufacturer similar to this article details? Preface: Nvidia is a major player in the GPU market, known for its high-performance graphics cards used in gaming, professional visualization, data centers, and AI applications. Imagination Technologies…
-
CVE-2025-21756: Does the vsock design flaw affect Hyper-V? (4th May 2025)
Preface: Hyper-V is still available as a role in Windows Server 2022 and will be supported as long as that operating system is, currently scheduled for end of extended support on October 14, 2031. Background: The vsock can also be used in QEMU/KVM as well as HyperV but the code is close source. H2G (host…
-
Power outage in Spain and Portugal on caused by rare atmospheric phenomenon. So called Induced atmospheric vibration. (1st May 2025)
Preface: MADRID/LISBON, April 28 (Reuters) – Power started returning to parts of the Iberian peninsula late on Monday after a huge outage brought most of Spain and Portugal to a standstill, grounding planes, halting public transport, and forcing hospitals to suspend routine operations. Background: The recent widespread power outage in Spain, Portugal, and parts of…