-
CVE-2025-37834: About Linux vmscan[.]c (8th May 2025)
Preface: All systems based on the Linux kernel utilize the vmscan[.]c file for memory management. This file is integral to the kernel’s memory reclamation process, ensuring efficient use of system memory across various Linux distributions. Background: The vmscan[.]c file in the Linux kernel is responsible for managing memory reclamation. It contains functions that help the…
-
CVE-2024-49835 – Out-of-bounds Write in SPS Applications (8th May 2025)
Preface: Semi-Persistent Scheduling (SPS) is used in LTE and 5G networks to reduce control channel overhead for applications requiring persistent radio resource allocations, such as VoIP and VoLTE . The memory usage for SPS on Android devices can vary based on several factors, including the specific implementation and the network conditions. A method and apparatus…
-
Mali GPU Driver Security Bulletin: CVE-2025-0427
(7th May 2025) Last updated: 2 May 2025 (official) Preface: An ioctl interface is a single system call by which userspace may communicate with device drivers. Requests on a device driver are vectored with respect to this ioctl system call, typically by a handle to the device and a request number. Background: The Arm Mali…
-
CVE-2024-49739 – GPU DDK misuse ptrace system call (6th May 2025)
Official release posted: 2nd May 2025 Since the manufacturer did not provide a detailed description, is the situation discovered by the manufacturer similar to this article details? Preface: Nvidia is a major player in the GPU market, known for its high-performance graphics cards used in gaming, professional visualization, data centers, and AI applications. Imagination Technologies…
-
CVE-2025-21756: Does the vsock design flaw affect Hyper-V? (4th May 2025)
Preface: Hyper-V is still available as a role in Windows Server 2022 and will be supported as long as that operating system is, currently scheduled for end of extended support on October 14, 2031. Background: The vsock can also be used in QEMU/KVM as well as HyperV but the code is close source. H2G (host…
-
CVE-2025-23245: NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor (30-4-2025)
Preface: DeepSpeed MII, an open-source Python library developed by Microsoft, aims to make powerful model inference accessible, emphasizing high throughput, low latency, and cost efficiency. TensorRT LLM, an open-source framework from NVIDIA, is designed for optimizing and deploying large language models on NVIDIA GPUs. Background: TensorRT-LLM is a library developed by NVIDIA to optimize and…
-
CVE-2024-45552 – Buffer Over-read in Data Network Stack & Connectivity (30-04-2025)
NVD Published Date: 04/07/2025 NVD Last Modified: 04/07/2025 Preface: Real-time Transport Protocol (RTP) is a network protocol used for delivering audio and video data over the internet in real time. It is designed to provide reliable and efficient transmission of multimedia content, even in the presence of network congestion or packet loss. Background: The Snapdragon…
-
CVE-2025-31201: about RPAC – Reconfigurable Processing Architecture Core – iPhone XS and later (28-4-2025)
Official Released April 16, 2025 Preface: The Reconfigurable Processing Architecture Core (RPAC) in Apple iOS is a component found in newer Apple Silicon chips. Its major function is to enhance the security and performance of the system by providing a flexible and efficient processing architecture. RPAC is designed to support various computational tasks and can…
-
CVE‑2025‑23245 and CVE-2025-23246: About NVIDIA vGPU software Driver (24-04-2025)
Preface: To virtualize a single NVIDIA GPU into multiple virtual GPUs and allocate them to different virtual machines or users, you can use NVIDIA’s vGPU capability. Background: Unified memory is disabled by default. If used, you must enable unified memory individually for each vGPU that requires it by setting a vGPU plugin parameter. NVIDIA CUDA…
-
CVE‑2025‑23244: About NVIDIA GPU Display Driver (24-04-2025)
Preface: The NVIDIA Tesla R570 driver is used for various data center GPUs, including the NVIDIA A100 and NVIDIA V100. These GPUs are designed for high-performance computing, AI, and deep learning applications. Background: The CUDA software environment consists of three parts: On Linux systems, the CUDA driver and kernel mode components are delivered together in…