-
CVE-2024-26926: Kernel – The vulnerability in this section could lead to local escalation of privilege in the kernel with no additional execution privileges needed (6 Jun 2024)
Preface: In linux distributions the term ‘upstream’ (also applied to kernel) refers to the original version (as is released by software developers) of a program/software (kernel in your case) while ‘downstream’ refers to the software provided by linux distribution. Background: There are many ways to communicate with IPC, such as: Shared Memory, Message Queue, PIPE,…
-
Apple security updates on 20th May 2024, But it has not published CVE entries. Observe how Apple handled in the past, maybe you can find it in a CVE few months from now. (27-05-2024)
Preface: Apple released iOS 17.5 and iPadOS 17.5 on May 20, 2024, which fixed multiple security vulnerabilities. I heard that some users found that photos they had deleted years ago suddenly appeared in recent albums as new photos. Background: The attached pictures document some rare occurrences. For example, which IOS version still support 32 bit…
-
CVE-2024-23354 Memory corruption when the IOCTL call is interrupted by a signal. (24May 2024)
Originally published on May 6, 2024 Preface: The Snapdragon 8 Gen 2 Mobile Platform defines a new premium standard for connected computing. Intelligently engineered with groundbreaking AI across the board, this AI marvel enables truly extraordinary experiences. Background: A vertex buffer object (VBO) is an OpenGL feature that provides methods for uploading vertex data (position,…
-
CVE-2024-21474: Qualcomm did not disclose technical details. Could this situation cause this problem? (6th May 2024)
Preface: The Qualcomm Snapdragon X65 5G Modem is the baseband chipset used in the iPad Pro (11-inch) (4th generation), iPad Pro (12.9-inch) (6th generation), iPhone 14, iPhone 14 Plus, iPhone 14 Pro and iPhone 14 Pro Max. Background: A power management integrated circuit (PMIC) is used to manage power on an electronic devices or in…
-
Android Security Bulletin – May 2024 There’s a lot you can explore (9 May 2024)
Preface: Heard that Long-term support (LTS) for Linux kernels is being reduced from six to two years now. Background: Greg Kroah-Hartman is a major Linux kernel developer. As of April 2013, he is the Linux kernel maintainer for the -stable branch, the staging subsystem, USB, driver core, debugfs, kref, kobject, and the sysfs kernel subsystems,…
-
CVE-2024-1067: Mali GPU Kernel Driver allows improper GPU memory processing operations (8 May 2024)
Date of issue: 3rd May 2024 Preface: The Mali-G720 and Mali-G620 GPUs complete the world-class GPU portfolio for a wide range of consumer devices. After four generations of GPUs on the fourth-generation Valhall architecture, the latest Arm GPUs are built on a new fifth-generation GPU architecture (called Gen 5). Background: The New 5th Gen Arm…
-
Starting from CVE-2024-34476, other design flaws have also been found, please use non-vulnerable Open5GS versions for development. (4-May-2024)
Preface: The two prerequisites for running Open5GS are the Open5GS core and MongoDB. The MongoDB, a document-based database, for user equipment registration. MongoDB uses some weird special processor instruction, which is not provided in intel Celeron processor. Background: The Access and Mobility Management Function (AMF) is one of the control plane network functions (NF) of…
-
CVE-2024-23271: A logic issue was addressed with improved checks, said Apple. (24-04-2024)
Preface: How to use iframes? To use iframes, you need to create an <iframe> element and place it inside the <body> element of your web page. You can use the src attribute to specify the web page you want to load into the iframe. For example, <iframe src=”page2.html”> loads page2.html into the iframe. You can…
-
CVE-2024-1065: About Arm 5th Gen GPU Architecture Kernel Driver (23-04-2024)
Original release date April 19, 2024 Preface: The Mali-G720 and Mali-G620 GPUs complete the world-class GPU portfolio for a wide range of consumer devices. After four generations of GPUs on the fourth-generation Valhall architecture, the latest Arm GPUs are built on a new fifth-generation GPU architecture (called Gen 5). Background: The New 5th Gen Arm…
-
CVE-2024-27086: MSAL.NET applications susceptible to local denial of service in authentication flows (17th April 2024)
Preface: Upgrade from Xamarin to [.]NET, Microsoft support for Xamarin will end on May 1, 2024 for all Xamarin SDKs including Xamarin.Forms. Background: The Microsoft Authentication Library (MSAL) enables developers to acquire security tokens from the Microsoft identity platform to authenticate users and access secured web APIs. It can be used to provide secure access…