-
CVE-2024-31335 GPU – PowerVR: Wrong order of operations in DevmemIntUnmapPMR2 may lead to temporarily dangling PTEs.AI accelerators called Neural Network Accelerator (NNA) staying alert! (7 June 2024)
Official Posted: 31st May 2024 Preface: PowerVR not limited 2D and 3D rendering, and for video encoding, decoding, associated image processing. It also develops AI accelerators called Neural Network Accelerator (NNA). The IMG Series4 is a revolutionary neural network accelerator (NNA) for the automotive industry that enables ADAS and autonomous driving. PowerVR accelerators are not…
-
CVE-2024-26926: Kernel – The vulnerability in this section could lead to local escalation of privilege in the kernel with no additional execution privileges needed (6 Jun 2024)
Preface: In linux distributions the term ‘upstream’ (also applied to kernel) refers to the original version (as is released by software developers) of a program/software (kernel in your case) while ‘downstream’ refers to the software provided by linux distribution. Background: There are many ways to communicate with IPC, such as: Shared Memory, Message Queue, PIPE,…
-
CVE-2024-22476: Improper input validation in some Intel® Neural Compressor software (5 June 2024)
Original article published on 14-05-2024 Preface: Ancient humans hunted for survival. As times goes by, the evolution make them become intelligence biology. This pursuit of progress divided into different level of human. Human want is never ending. When Artificial Intelligence has born. It is the creator’s final blessing to human. Background: Intel Neural Compressor performs…
-
CVE-2024-1086 : A use-after-free vulnerability in the Linux kernel’s netfilter. The IoT world remins vigilant. 4 June 2024
Preface: By default, OpenWrt builds the kernel with a useful set of netfilter capabilities for a robust router. NAT. REJECT. REDIRECT. CONNTRACK. LOG. OpenWrt is a Linux distribution suitable for embedded devices. Currently, many embedded hardware platforms on the market use OpenWrt as their basis, such as routers, network gateways or industrial use computer Background:…
-
About CVE-2024-36843: libmodbus v3.1.6 design weakness (3 June 2024)
Preface: Modbus is a communication protocol widely used in the field of industrial automation. It provides a standardized method for devices to communicate with each other over the network, making it an important tool for connecting and controlling various industrial equipment. Background: libmodbus supports the following functions: Vulnerability details: libmodbus v3.1.6 was discovered to contain…
-
CVE-2024-0103 – NVIDIA Triton Inference Server for Linux hit Incorrect Initialization of Resource vulnerability (31-05-2024)
Preface: AI-powered systems analyse the severity of the vulnerability, potential impact, and exploitability and prioritise patches based on the criticality of the vulnerability. Perhaps AI contains self diagostic and do remedy by himself! Background: An open-source software that helps standardize model deployment and delivers fast and scalable AI in production. Vulnerability details: CVE-2024-0103 Information disclosure…
-
CVE-2024-38016: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (29-05-2024)
Preface: In the Linux Kernels n_gsm serial line discipline, which can be exploited by local attackers to gain kernel level root access. It original published by other Linux brand on 8th May 2024. Background: In Unix systems, a tty (which is short for “teletypewriter”) is the standard representation of a terminal device, with at least…
-
Red Hat security advisory: Important – glibc security update (29-05-2024)
Preface: You can clear the cache of nscd by performing the following actions: Execute the following command: sudo /etc/init[.]d/nscd restart. Background: Nscd is a daemon that provides a cache for the most common name service requests. The default configuration file, /etc/nscd. conf, determines the behavior of the cache daemon. The glibc packages provide the standard…
-
CVE-2024-5274: Google Chrome fixed remote code execution vulnerability (28-05-2024)
Preface: Every time I start learning CVE. It helps me enrich my knowledge. Even though it was released months ago. Background: V8 is a JavaScript and WebAssembly engine developed by Google for its Chrome browser. Each WebAssembly module executes within a sandboxed environment separated from the host runtime using fault isolation techniques. Ref: wasmtime is a…
-
Apple security updates on 20th May 2024, But it has not published CVE entries. Observe how Apple handled in the past, maybe you can find it in a CVE few months from now. (27-05-2024)
Preface: Apple released iOS 17.5 and iPadOS 17.5 on May 20, 2024, which fixed multiple security vulnerabilities. I heard that some users found that photos they had deleted years ago suddenly appeared in recent albums as new photos. Background: The attached pictures document some rare occurrences. For example, which IOS version still support 32 bit…