-
Repost CVE-2024-5274: Google Chrome fixed remote code execution vulnerability (11-06-2024)
CVE Release date: May 24, 2024 Preface: Every time I start learning CVE. It helps me enrich my knowledge. Even though it was released months ago. Background: Around the world in 2024, over 4450 companies have started using Chrome as Site Search tool. V8 is a JavaScript and WebAssembly engine developed by Google for its Chrome…
-
Regarding CVE-2024-0099 and CVE-2024-0084: Is this a renewed focus on vulnerabilities discovered in 2021? 10-June-2024
Original posted 06/06/2024 Preface: Oracle and Citrix have large customer bases and use Xen as their primary hypervisor. Red Hat, SUSE, and Canonical support KVM as a virtualization option in their Linux versions. When it comes to cloud computing, administrators face a similar decision: Citrix and Oracle offer Xen-based offerings rather than Google’s KVM. Background:…
-
CVE-2024-31335 GPU – PowerVR: Wrong order of operations in DevmemIntUnmapPMR2 may lead to temporarily dangling PTEs.AI accelerators called Neural Network Accelerator (NNA) staying alert! (7 June 2024)
Official Posted: 31st May 2024 Preface: PowerVR not limited 2D and 3D rendering, and for video encoding, decoding, associated image processing. It also develops AI accelerators called Neural Network Accelerator (NNA). The IMG Series4 is a revolutionary neural network accelerator (NNA) for the automotive industry that enables ADAS and autonomous driving. PowerVR accelerators are not…
-
CVE-2024-26926: Kernel – The vulnerability in this section could lead to local escalation of privilege in the kernel with no additional execution privileges needed (6 Jun 2024)
Preface: In linux distributions the term ‘upstream’ (also applied to kernel) refers to the original version (as is released by software developers) of a program/software (kernel in your case) while ‘downstream’ refers to the software provided by linux distribution. Background: There are many ways to communicate with IPC, such as: Shared Memory, Message Queue, PIPE,…
-
CVE-2024-22476: Improper input validation in some Intel® Neural Compressor software (5 June 2024)
Original article published on 14-05-2024 Preface: Ancient humans hunted for survival. As times goes by, the evolution make them become intelligence biology. This pursuit of progress divided into different level of human. Human want is never ending. When Artificial Intelligence has born. It is the creator’s final blessing to human. Background: Intel Neural Compressor performs…
-
CVE-2024-0103 – NVIDIA Triton Inference Server for Linux hit Incorrect Initialization of Resource vulnerability (31-05-2024)
Preface: AI-powered systems analyse the severity of the vulnerability, potential impact, and exploitability and prioritise patches based on the criticality of the vulnerability. Perhaps AI contains self diagostic and do remedy by himself! Background: An open-source software that helps standardize model deployment and delivers fast and scalable AI in production. Vulnerability details: CVE-2024-0103 Information disclosure…
-
CVE-2024-38016: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (29-05-2024)
Preface: In the Linux Kernels n_gsm serial line discipline, which can be exploited by local attackers to gain kernel level root access. It original published by other Linux brand on 8th May 2024. Background: In Unix systems, a tty (which is short for “teletypewriter”) is the standard representation of a terminal device, with at least…
-
Red Hat security advisory: Important – glibc security update (29-05-2024)
Preface: You can clear the cache of nscd by performing the following actions: Execute the following command: sudo /etc/init[.]d/nscd restart. Background: Nscd is a daemon that provides a cache for the most common name service requests. The default configuration file, /etc/nscd. conf, determines the behavior of the cache daemon. The glibc packages provide the standard…
-
CVE-2024-5274: Google Chrome fixed remote code execution vulnerability (28-05-2024)
Preface: Every time I start learning CVE. It helps me enrich my knowledge. Even though it was released months ago. Background: V8 is a JavaScript and WebAssembly engine developed by Google for its Chrome browser. Each WebAssembly module executes within a sandboxed environment separated from the host runtime using fault isolation techniques. Ref: wasmtime is a…
-
CVE-2024-23354 Memory corruption when the IOCTL call is interrupted by a signal. (24May 2024)
Originally published on May 6, 2024 Preface: The Snapdragon 8 Gen 2 Mobile Platform defines a new premium standard for connected computing. Intelligently engineered with groundbreaking AI across the board, this AI marvel enables truly extraordinary experiences. Background: A vertex buffer object (VBO) is an OpenGL feature that provides methods for uploading vertex data (position,…