Cyber security technical information

Author: admin

  • CVE-2025-27558: FragAttacks against mesh networks (21-05-2025)

    Preface: A Mesh Basic Service Set (MBSS) is a self-contained wireless network created by a group of interconnected mesh stations (STAs). Each mesh station can act as both an access point and a mesh node, enabling communication and data sharing within the mesh network. The MBSS uses a “mesh profile” to define the network’s characteristics,…

  • CVE-2025-37991 – PA-RISC: Fix double SIGFPE crash (21-05-2025)

    Preface: In the Linux Kernel, SIGFPE (Signal Floating-Point Exception) indicates a computational error, specifically related to floating-point arithmetic or integer arithmetic errors. This signal is triggered by events like floating-point overflow, underflow, or division by zero. While named “Floating-Point Exception,” it actually covers a broader range of arithmetic errors. Background: What triggers SIGFPE? How it…

  • CVE-2025-47935 and CVE-2025-47944: About Multer design weakness (19-05-2025)

    Preface: In a typical web application, there are three layers of middleware: Web server middleware. Application server middleware and Database middleware. A common request for file upload applications. For example: uploading user avatars, attaching documents or handling multimedia content. Multer is a node.js middleware for handling multipart/form-data, which is primarily used for uploading files. Background:…

  • Part 1: Spectre-v2 Domain Isolation, does it fight against variants? (19-05-2025)

    Preface: In computer architecture, a branch predictor is a digital circuit that tries to guess which way a branch will go before this is known definitively. Background: Although the Spectre v2 vulnerability has been protected by domain isolation technologies such as IBPB, eIBRS and BHI_NO, which prevent attackers from training the indirect branch predictor with…

  • CVE-2025-47436: Heap-based Buffer Overflow vulnerability in Apache ORC. (15-5-2025)

    Preface: Traditional row-based formats for data normalization have several limitations: Complex Queries: Normalization often requires joining multiple tables to retrieve data, which can make queries more complex and slower. Maintenance Challenges: Maintaining a highly normalized database can be more difficult, as changes to the schema may require updates to multiple tables. Background: Apache ORC (Optimized…

  • Privilege Desynchronization: Cross-Privilege Spectre Attacks with Branch Privilege Injection – Part 2 (14-05-2025)

    Preface: Before reading the detailed information, it is recommended to read Part 1 first. Privilege Desynchronization: Cross-Privilege Spectre Attacks with Branch Privilege Injection (Part 1)  – http://www.antihackingonline.com/under-our-observation/privilege-desynchronization-cross-privilege-spectre-attacks-with-branch-privilege-injection-14-05-2025/ Technical details: It is to ensure the serialization of memory access. The internal operation is to add some delays in a series of memory accesses to ensure that…

  • Privilege Desynchronization: Cross-Privilege Spectre Attacks with Branch Privilege Injection (14-05-2025)

    Preface: Enhanced IBRS (eIBRS) and Automatic IBRS (AutoIBRS) are features designed to mitigate the Spectre V2 vulnerability, which affects speculative execution in CPUs. Background: AutoIBRS is a similar feature introduced by AMD in their Zen 4 processors. It automatically manages IBRS mitigation resources across privilege level transitions, offering better performance compared to Retpoline. This feature…

  • CVE-2025-21460: Improper Input Validation in Automotive Software platform based on QNX. (13th May 2025)

    Preface: As of June 26, 2023, QNX software is now embedded in over 255 million vehicles worldwide, including most leading OEMs and Tier 1s, such as BMW, Bosch, Continental, Dongfeng Motor, Geely, Ford, Honda, Mercedes-Benz, Subaru, Toyota, Volkswagen, Volvo, and more. Background: In Automotive Ethernet Audio Video Bridging (eAVB), reliable communication is not limited to…

  • About CVE-2025-37889 – ASoC framework Consistently treat platform_max as control value (12th May 2025)

    Preface: The overall project goal of the ALSA System on Chip (ASoC) layer is to provide better ALSA support for embedded system-on-chip processors. Advanced Linux Sound Architecture (ALSA) is a software framework and part of the Linux kernel that provides an application programming interface (API) for sound card device drivers. Background: The snd_soc_put_volsw() function is…

  • CVE-2025-37834: About Linux vmscan[.]c (8th May 2025)

    Preface: All systems based on the Linux kernel utilize the vmscan[.]c file for memory management. This file is integral to the kernel’s memory reclamation process, ensuring efficient use of system memory across various Linux distributions. Background: The vmscan[.]c file in the Linux kernel is responsible for managing memory reclamation. It contains functions that help the…