-
CVE-2024-38160: Windows Network Virtualization Remote Code Execution Vulnerability (13th Aug 2024)
Preface: A HEAP-Based buffer overflow vulnerability occurs when a program writes more data to a heap-allocated memory buffer than the buffer is designed to hold. Background: Microsoft provides network virtualization in Hyper-V with Windows Server 2016 and 2019. With this feature, workloads on Hyper-V can connect to virtualized Layer 2 networks and traffic is routed…
-
CVE-2024-42257: In the Linux kernel, the vulnerability related to ext4 has been resolved (12th Aug 2024)
Published: 2024-08-08 Updated: 2024-08-07 Preface: Ext4 is a series of backwards-compatible extensions of Ext2. It is also the file system of most Linux distributions. Ext4 is supported on other operating systems including Windows, Free BSD, macOS and KolibriOS (read-only) Background: Ext4 – The fourth generation extension file system is a log file system under the…
-
CVE-2024-7589: Race condition vulnerability occurs when integration of blacklisted in OpenSSH in FreeBSD. (11-Aug-2024)
Preface: SSH clients are designed for direct user interaction, providing a command-line interface (CLI) or graphical user interface (GUI) on the initiating device. The SSHD operates as a background process, running silently in the background without any user intervention. Background: How do I make my SSH connection more stable? SSH servers often have an idle…
-
CVE-2024-1067 was released in May 2024. Are CVE-2024-2937 and CVE-2024-4607, released in August 2024, caused by similar design flaws? (7 Aug 2024)
Preface: May 2021 to May 2023 (ARM GPU evolution) Valhall 3rd Gen – On May 25, 2021, Arm announced their Valhall 3rd Gen GPU Architecture (as part of TCS21), including the Mali-G710, Mali-G510, and Mali-G310 GPUs. Valhall 4th Gen – On June 28, 2022, Arm announced their Valhall 4th Gen GPU Architecture (as part of…
-
CVE-2024-41012: filelock- Remove locks reliably when fcntl/close race is detected (24/07/2024)
In the Linux kernel, design weakness (CVE-2024-41012) has been resolved. Preface: The GFP acronym stands for “get free pages”, the underlying memory allocation function. Diversity of the allocation APIs combined with the numerous GFP flags makes the question “How should I allocate memory?” not that easy to answer, although very likely you should use. kzalloc(<size>,…
-
CVE-2024-41009: bpf – Fix overrunning reservations in ringbuf (17th July 2024)
Preface: Consumer and producer counters are put into separate pages to allow each position to be mapped with different permissions. This prevents a user-space application from modifying the position and ruining in-kernel tracking. The permissions of the pages depend on who is producing samples: user-space or the kernel. Starting from Linux 5.8, BPF provides a…
-
CVE-2023-20597: AGESA™ firmware versions previously provided did not sufficiently mitigate CVE-2023-20594. Release 2nd round of remedy.(13-June-2024)
Preface: June 2024 Update – After additional analysis, AMD believes that the Client AGESA™ firmware versions previously provided did not sufficiently mitigate CVE-2023-20594. This security bulletin has been updated with new Client AGESA™ firmware versions that contain updated mitigations. Background: The DXE drivers are responsible for initializing the processor, chipset, and platform components as well…
-
CVE-2024-38016: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (29-05-2024)
Preface: In the Linux Kernels n_gsm serial line discipline, which can be exploited by local attackers to gain kernel level root access. It original published by other Linux brand on 8th May 2024. Background: In Unix systems, a tty (which is short for “teletypewriter”) is the standard representation of a terminal device, with at least…
-
Red Hat security advisory: Important – glibc security update (29-05-2024)
Preface: You can clear the cache of nscd by performing the following actions: Execute the following command: sudo /etc/init[.]d/nscd restart. Background: Nscd is a daemon that provides a cache for the most common name service requests. The default configuration file, /etc/nscd. conf, determines the behavior of the cache daemon. The glibc packages provide the standard…
-
AMD urged software developers to implement best practices to avoid secret-dependent data accesses or control flows. (28-04-2024)
Originally published on April 26, 2024. Preface: (Level 3 cache) A memory bank built onto the motherboard or within the CPU module. The L3 cache feeds the L2 cache, and its memory is typically slower than the L2 memory, but faster than main memory. Background: The last-level cache (LLC) is the last chance for memory…