Category: AI and ML

  • CVE-2025-23266 and CVE-2025-23266: NVIDIA Container Toolkit design weakness (16-07-2025)

    Preface: Docker Compose is a tool that makes it easier to define and manage multi-container Docker applications. It simplifies running interconnected services, such as a frontend, backend API, and database, by allowing them to be launched and controlled together. Docker Compose is a utility for defining and running multi-container Docker applications. Furthermore, Docker Compose responsible…

  • CVE-2025-53818: Command Injection in MCP Server github-kanban-mcp-server (15th July 2025)

    Preface: Does it good when artificial Intelligence use Open Source software? Yes, using open-source software is generally considered a positive aspect for artificial intelligence development. It fosters collaboration, transparency, and faster innovation, while also potentially reducing costs and biases. However, it’s crucial to acknowledge potential risks like misuse and the need for responsible development practices.…

  • AMD-based AI systems combining AMD rocBLAS and Intel MKL can become fast supercomputer in the world (14-07-2025)

    Preface: Supercomputers rely on math libraries to efficiently handle the complex numerical computations required for scientific simulations and modeling. These libraries provide optimized routines for linear algebra, numerical analysis, and other mathematical operations, enabling supercomputers to perform these calculations much faster than with general-purpose code. While math libraries are a crucial component, they are not…

  • Nvidia security focus – Rowhammer attack potential risk – July 2025 (11th July 2025)

    Preface: The Rowhammer effect, a hardware vulnerability in DRAM chips, was first publicly presented and analyzed in June 2014 at the International Symposium on Computer Architecture (ISCA). This research, conducted by Yoongu Kim et al., demonstrated that repeatedly accessing a specific row in a DRAM chip can cause bit flips in nearby rows, potentially leading…

  • AMD releases details about Transient Scheduler Attack (TSA) – 9 Jul 2025

    Preface: CPU transient instructions refer to instructions that are speculatively executed by a processor’s out-of-order execution engine, but which may ultimately be discarded and not reflected in the processor’s architectural state. These instructions are executed based on predictions about control flow or data dependencies, and if the prediction is incorrect, the results of these transient…

  • CVE-2025-38085: About hugetlb[.]c of Linux kernel. (29-06-2025)

    Preface: Does Big Data use the TLB in the Linux kernel? Yes, big data applications in Linux utilize the Translation Lookaside Buffer (TLB) as a crucial component of memory management. The TLB speeds up address translation by caching recently used virtual-to-physical address mappings. Applications like databases, which often handle large datasets and have specific memory…

  • CVE-2025-23260: About NVIDIA AIStore on Kubernetes (26-06-2025)

    Preface: AI and machine learning workloads rely on optimized object storage to handle the massive, unstructured datasets needed for training and operation. NVIDIA AIStore (AIS) aims to overcome the limitations of traditional filesystems in handling large AI datasets by providing a distributed storage system that can handle the demands of modern AI models. Background: An…

  • CVE-2025-23264 and CVE-2025-23265: About NVIDIA Megatron-LM (25-06-2025)

    Preface: What Does “Linear” Mean in Machine Learning? In the context of machine learning and neural networks: A linear function is one where the relationship between inputs and outputs can be represented as a straight line (in 2D), or more generally, a hyperplane in higher dimensions. Background: NVIDIA Megatron-LM is an open-source framework designed for…

  • AMD Fixed CVE-2024-21969 (23rd June 2025)

    CVE-2024-21969: Whispering Pixels: Exploiting Uninitialized Register Accesses in Modern GPUs. Preface: How to Enable Secure GPU Mode (Register Clearing) Background: The proliferation of graphics processing units (GPUs) has brought unprecedented computing power. Multiple register-based vulnerabilities found across different GPU implementations. So-called whisper pixels. The vulnerability poses unique challenges to an adversary due to opaque scheduling…

  • CVE-2025-23252 – NVIDIA has released a software update for NVIDIA® NVDebug tool to address the security issue.(18-06-2025)

    Preface: The NVdebug tool, used for NVIDIA GPU debugging, relies on the NVIDIA Data Center GPU Manager (DCGM) library. Specifically, it utilizes DCGM version 2.2.x or later. DCGM is a suite of tools for managing and monitoring NVIDIA GPUs in data center and cluster environments. Background: The NV Debug Tool is part of the NVIDIA…