USN-9040-1: Linux kernel (Low Latency NVIDIA) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to c…

Vulnerabilities & Zero-Day IoT & OT Security Mobile Development Cloud Computing Networking & Internet Operating Systems Hardware & Chips Cryptography Incident Response & Forensics Storage & Backup
Read the full article at Ubuntu Security Notices Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
آی‌تی‌رسان

همگام‌سازی گالری سامسونگ با فضای ذخیره‌سازی گوگل رسما آغاز شد!

سامسونگ جزئیات رسمی انتقال قابلیت همگام‌سازی اپلیکیشن گالری به فضای ابری گوگل را منتشر کرد. این تغییر پس از پایان […] نوشته همگام‌سازی گالری سامسونگ با فضای ذخیره‌سازی گوگل رسما آغاز شد! اولین بار در آی‌ تی‌ رسان منتشر شد.

CSO Online

What will it take to make VulnOps a reality?

Just over a year ago, before advanced AI models began discovering software vulnerabilities at a nearly unmanageable scale in the so-called vulnpocalypse, three industry experts pioneered the concept of “VulnOps.” VulnOps, as envisioned by Heather Adkins, Gadi Evron, and Bruce Schneier, is a significant phase in the evolution of AI-assisted cyber defense in which vulnerability research and remediation would become sca…

The Hacker News

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53 in Developer Tools, and 27 in SharePoint Server. The patches also include 165 non-Microsoft-issued CVE identifiers.