-
AMD releases details about Transient Scheduler Attack (TSA) – 9 Jul 2025
Preface: CPU transient instructions refer to instructions that are speculatively executed by a processor’s out-of-order execution engine, but which may ultimately be discarded and not reflected in the processor’s architectural state. These instructions are executed based on predictions about control flow or data dependencies, and if the prediction is incorrect, the results of these transient…
-
CVE-2025-21432: Double Free in SPS-HLOS (8th July 2025)
Preface: Concise Binary Object Representation (CBOR) is a binary data serialization format loosely based on JSON authored by Carsten Bormann. The use of Concise Binary Object Representation (CBOR) in SPS HLOS (and other constrained environments) is primarily due to its ability to provide a compact, efficient, and extensible binary data format. This makes it suitable…
-
CVE-2025-21450: Improper Authentication in GPS GNSS (7th July 2025)
Preface: GNSS – This is a global term encompassing all satellite constellations that provide positioning, navigation, and timing (PNT) services. Besides GPS, other GNSS include GLONASS (Russia), Galileo (EU), and BeiDou (China). GPS – The Global Positioning System, developed by the US Department of Defense, is the most widely recognized and used GNSS. It was…
-
CVE-2025-52496: Mbed TLSan open-source C library design weakness (6th July 2025)
Preface: What is the difference between FreeRTOS and Cmsis-RTOS? Basically FreeRTOS is a RTOS, while CMSIS-RTOS is only a wrapper for any RTOS (like FreeRTOS, CMSIS-RTOS RTX or anything you want). CMSIS-RTOS is an API that enables consistent software layers with middleware and library components. Mbed TLS aims to provide a set of powerful and…
-
CVE-2025-6073 – Industrial Controls Be Aware! (4th July 2025)
Preface: The default configuration of the ABB RMC-100’s REST interface is disabled. ABB recommends leaving the REST interface disabled when not in use, particularly when configuring MQTT functionality. The RMC-100 is not intended for access over public networks. Background: The ABB RMC-100 is a popular and widely used remote modular controller, particularly within the oil…
-
CVE-2025-46647: A vulnerability of plugin openid-connect in Apache APISIX.(3rd July 2025)
Preface: API Gateway can be helpful for ChatGPT plugin developers to expose, secure, manage, and monitor their API endpoints. This repo demonstrates how to use Apache APISIX API Gateway as a front door for communication between ChatGPT custom plugins and backend APIs. For more details, please refer to the link – https://github.com/Boburmirzo/apisix-chatgpt-gateway-plugin Background: The primary…
-
CVE-2025-0038 exposes a runtime vulnerability due to missing checks in PMU firmware. (2nd July 2025)
Preface: Users typically build custom PMU firmware tailored to their specific hardware platform and application requirements. PMU firmware can be loaded by either FSBL or CSU BootROM (CBR). Both these flows are supported by AMD. Loading PMU firmware using FSBL has the following benefits: – Possible quick boot time, when PMU firmware is loaded after…
-
CVE-2025-38085: About hugetlb[.]c of Linux kernel. (29-06-2025)
Preface: Does Big Data use the TLB in the Linux kernel? Yes, big data applications in Linux utilize the Translation Lookaside Buffer (TLB) as a crucial component of memory management. The TLB speeds up address translation by caching recently used virtual-to-physical address mappings. Applications like databases, which often handle large datasets and have specific memory…
-
CVE-2025-23260: About NVIDIA AIStore on Kubernetes (26-06-2025)
Preface: AI and machine learning workloads rely on optimized object storage to handle the massive, unstructured datasets needed for training and operation. NVIDIA AIStore (AIS) aims to overcome the limitations of traditional filesystems in handling large AI datasets by providing a distributed storage system that can handle the demands of modern AI models. Background: An…
-
CVE-2025-23264 and CVE-2025-23265: About NVIDIA Megatron-LM (25-06-2025)
Preface: What Does “Linear” Mean in Machine Learning? In the context of machine learning and neural networks: A linear function is one where the relationship between inputs and outputs can be represented as a straight line (in 2D), or more generally, a hyperplane in higher dimensions. Background: NVIDIA Megatron-LM is an open-source framework designed for…