-
CVE-2025-2953: Floating point exception in torch[.]mkldnn_max_pool2d (31st Mar 2025)
Preface: The torch[.]nn[.]MaxPool2d function in PyTorch is used to apply a 2D max pooling operation over an input signal, which is typically an image or a batch of images. Background: A floating point exception crash when using torch[.]mkldnn_max_pool2d can occur due to several reasons, often related to invalid or extreme values for parameters like kernel…
-
Similar to previously disclosed side-channel attacks. Manufacturer (AMD) response to researcher (30-03-2025)
Preface: On 24th Oct, 2024, Researchers from Azure® Research, Microsoft® have provided to AMD a paper titled “Principled Microarchitectural Isolation on Cloud CPUs.” In their paper, the researchers describe a potential side-channel vulnerability on AMD CPUs. AMD believes that existing mitigation recommendations for prime and probe side-channel attacks remain applicable to the presented vulnerability. Background:…
-
CVE-2025-30219: About RabbitMQ (26th Mar 2025)
Preface: Message queues are quite important in machine learning for several reasons: Background: RabbitMQ can be quite helpful in AI applications! RabbitMQ is an open-source message broker that facilitates communication between different parts of a system asynchronously. Here are some ways it can assist AI: If you enable the management Plugin, you will be able…
-
CVE-2025-21424: Memory corruption while calling the NPU driver APIs concurrently (16th Mar 2025)
NVD Published Date: 03/03/2025NVD Last Modified: 03/07/2025 Preface: Real-time processing of sensor data for tasks like obstacle detection and navigation is crucial, making NPUs ideal for these applications. NPUs help in real-time decision-making and control, which is essential for robotic applications. While NPUs are highly efficient for specific AI applications, they cannot replace GPUs due…
-
CVE-2025-23242 & CVE-2025-23243:NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue (13th Mar 2025)
Preface: NeMo is an open source PyTorch-based toolkit for research in conversational AI that exposes more of the model and PyTorch internals. Riva supports the ability to import supported models trained in NeMo. NVIDIA Riva is a GPU-accelerated SDK for building Speech AI applications, customized for your use case, and delivering real-time performance. Background: NVIDIA…
-
CVE‑2025‑23360 – NVIDIA Nemo Framework contains a vulnerability (12th Mar 2025)
Preface: The symbol ~/. by itself is not a relative path traversal; it simply refers to the home directory of the current user. However, when combined with ./.., it can be part of a relative path traversal. Relative path traversal involves using sequences like ../ to navigate up the directory hierarchy. For example, ~/. refers…
-
CVE-2024-0141: NVIDIA Hopper HGX for 8-GPU contains a vulnerability in GPU vBIOS (10th Mar2025)
Last official update on February 28, 2025 at 3:28 PM Preface: Hopper PPCIe is limited to HGX 8-way systems, where the eight GPUs and four NVSwitches are passed through to one VM. Other topologies are not supported. Background: The GPU vBIOS can communicate through IOCTL (Input/Output Control) calls. IOCTL is a system call for device-specific…
-
CVE-2024-0114: NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller HMC (7 th March 2025)
Preface: NVIDIA collaborates with Supermicro for their server solutions, including the use of Supermicro’s BMC (Baseboard Management Controller) in certain systems. Supermicro provides a range of server solutions optimized for NVIDIA’s platforms. Background: The NVIDIA Hopper HGX for 8 GPUs has several standout features: High Performance: It hosts eight H100 Tensor Core GPUs, which are…
-
CVE-2024-36353: CROSS-PROCESS GPU MEMORY DISCLOSURE (27-02-2025)
Preface: Regarding its use in HPC clusters, the Radeon PRO V710 is indeed suitable. It is supported by AMD’s ROCm platform, which is optimized for HPC and AI workloads. Additionally, it is used in Azure’s NVads V710 v5-series virtual machines, which are designed for GPU-accelerated applications, including HPC. Background: The global memory of the AMD…
-
CVE-2024-0148: NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode (25-02-2025)
Preface: NVIDIA IGX Orin software is used by a variety of organizations, particularly those in industrial and medical environments. This platform is designed to support AI applications at the edge, providing high performance, advanced functional safety, and security. Some specific use cases include: The platform’s versatility and robust support make it suitable for any organization…