SkunkCyber’s Post

Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild. Tracked as CVE-2024-4610, the use-after-free issue impacts the following products - Bifrost GPU Kernel Driver (all versions from r34p0 to r40p0) Valhall GPU Kernel Driver (all versions from r34p0 to r40p0) "A local non-privileged user can make improper GPU memory

Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild. Tracked as CVE-2024-4610, the use-after-free issue impacts the following products - Bifrost GPU Kernel Driver (all versions from r34p0 to r40p0) Valhall GPU Kernel Driver (all versions from r34p0 to r40p0) "A local non-privileged user can make improper GPU memory

Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers: Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild. Tracked as CVE-2024-4610, the use-after-free issue impacts the following products - Bifrost GPU Kernel Driver (all versions from r34p0 to r40p0) Valhall GPU Kernel Driver (all versions from r34p0 to r40p0) "A local non-privileged user can make improper GPU memory

Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild. Tracked as CVE-2024-4610, the use-after-free issue impacts the following products - Bifrost GPU Kernel Driver (all versions from r34p0 to r40p0) Valhall GPU Kernel Driver (all versions from r34p0 to r40p0) "A local non-privileged user can make improper GPU memory https://lnkd.in/gBZGQ6Ph

Critical NVIDIA Container Toolkit Vulnerability Could Grant Full Host Access to AttackersA critical security flaw has been disclosed in the NVIDIA Container Toolkit that, if successfully exploited, could allow threat actors to break out of the confines of a container and gain full access to the underlying host. The vulnerability, tracked as CVE-2024-0132, carries a CVSS score of 9.0 out of a maximum of 10.0. It has been addressed in NVIDIA Container Toolkit version v1.16.2 andhttps://lnkd.in/dZnHQXD4

Critical NVIDIA Container Toolkit Vulnerability Could Grant Full Host Access to Attackers: A critical security flaw has been disclosed in the NVIDIA Container Toolkit that, if successfully exploited, could allow threat actors to break out of the confines of a container and gain full access to the underlying host. The vulnerability, tracked as CVE-2024-0132, carries a CVSS score of 9.0 out of a maximum of 10.0. It has been addressed in NVIDIA Container Toolkit version v1.16.2 and https://lnkd.in/g-aBYKTk

A critical security vulnerability has been identified in the NVIDIA Container Toolkit that could allow attackers to escape container confines and gain full access to the underlying host system. Tracked as CVE-2024-0132, this vulnerability has a CVSS score of 9.0, indicating a severe risk. It affects all versions of the toolkit up to v1.16.1 and the NVIDIA GPU Operator up to version 24.6.1, allowing threat actors to execute arbitrary commands on the host system with root privileges.

Building security directly in the silicone is great as it cannot be tampered with... But it becomes an issue when there is a vulnerability, as it cannot be patch 🤦♂️ A new side channel #attack allowing end-to-end #encryption key extractions when #Apple chips run implementations of widely used cryptographic protocols. and this cannot be #patched. One of the most effective mitigations is ciphertext blinding, but this requires rewriting application, so appart from big vendor, itmight not happen... #Cybersecurity #vulnerability https://gofetch.fail/

Arm discloses a critical vulnerability (CVE-2024-4610) in Mali GPU Kernel Drivers. This flaw, actively exploited, affects versions from r34p0 to r40p0

Arm discloses a critical vulnerability (CVE-2024-4610) in Mali GPU Kernel Drivers. This flaw, actively exploited, affects versions from r34p0 to r40p0...