-
Could CVE-2022-2637 and CVE-2023-38575 be the same? (13th March 2024)
Preface: In August 2022, CVE-2022-26373 told that Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. It looks that same vulnerability with new CVE reference number. What’s going on? CVE-2023-38575 was published on 13th March 2024. Background: Fundamentally, branch…
-
CVE-2023-46839: Fixed memory access through PCI device with phantom functions (XSA-449) 12th Mar 2024
Preface: SUSE’s partnership with HPE Cray dates back to the early 1990s, pre HPE’s acquisition of Cray, and the entire time SUSE has been collaborating on Cray OS – a specialized version of SUSE Linux Enterprise Server. Background: The hypervisor needs to manipulate the interaction between the guest OS and the associated physical device. PCI…
-
CVE-2024-23278: An app may be able to break out of its sandbox (11thMar 2024)
Vulnerability CVE-2024-23278 was released on March 7, 2024. Apple didn’t reveal specific details, so let’s see if we can dig out any clues. Preface: XPC has a sizeable portion of undocumented functionality, including its implementation (for example, the main project libxpc is closed source). XPC provides a public API at two levels: low-level and Foundation…
-
International Space Station slipping across the Moon’s face as it flies by at 8 kilometers per second (8th Mar 2024)
-
CVE-2023-28582 Buffer Copy Without Checking Size of Input in Data Modem (8th Mar 2024)
This issue was fixed on 2023/09/04. But the vendor did not announce the vulnerability until today (March 8, 2024). Preface: Datagram Transport Layer Security (DTLS) is a communications protocol providing security to datagram-based applications by allowing them to communicate in a way designed to prevent eavesdropping, tampering, or message forgery. Background: 5G security standards bring…
-
CVE-2024-27307: Not only machine learning, other system should staying alert because zOS Connect Designer uses JSONata, an open source expression language that is used for querying and transforming JSON data. (7thMar 2024)
Preface: What is declarative machine learning? Declarative machine learning enables users to specify what they want, and let the software figure out how to do it. Declarative ML is similar to AutoML tools that also make default selections and automate part or all of the ML lifecycle. Background: JSONata is a JSON query and transformation…
-
Android has released vulnerability information about CVE-2024-0039, However, with limited details. Take a closer look to see if it can dig out the details. (6th Mar 2024)
Preface: Android devices that act as both peripheral and central devices can communicate with other BLE peripherals while sending advertisements in peripheral mode. Devices supporting Bluetooth 4.1 and earlier can only use BLE in central mode. Older device chipsets may not support BLE peripheral mode. Background: A BLE device sends out a repetitive packet of…
-
CVE-2023-6143: Mali GPU Kernel Driver allows improper GPU memory processing operations (4th Mar 2024)
Preface: Use after free errors sometimes have no effect and other times cause a program to crash. While it is technically feasible for the freed memory to be re-allocated and for an attacker to use this reallocation to launch a buffer overflow attack. Background: Systems with Mali GPUs typically have a shared memory, so you…
-
Linux Kernel Memory Management (MM) Vulnerability (CVE-2024-26621) resolved (4th Mar 2024)
Preface: The Memory Management (MM) subsystem is an important cornerstone of the Linux kernel. It provides the necessary utilities for the underlying memory hardware (especially RAM) to meet the different needs of other kernel components and user-space processes. Background: About two months ago, larger anonymous mappings are now THP aligned. When a malloc library allocates…
-
Closer look of CVE-2023-52485 (1st Mar 2024)
Preface: DRM and KMS DRM stands for Direct Rendering Manager and was introduced to deal with graphic cards embedding GPUs KMS stands for Kernel Mode Setting and is a sub-part of the DRM API Background: The AMDgpu display manager, amdgpu_dm (or even simpler, dm) sits between DRM and DC. It acts as a liaison, converting…