CVE-2024-42642

CVE-2024-42642 介绍 所讨论的设备是任何MX500系列SSD。这些SSD由慧荣科技SM2259控制器控制（较老批次使用较旧的控制器慧荣科技SM2258，但本文档主要关注较新的型号）。 SM2259是一款4通道SATA 6Gb/s微控制器，搭载基于ARC架构的32位小端CPU。 通过观察截至本文档编写日期的最新固件M3CR046，发现并静态和动态确认了一些问题。 所有问题均出现在控制器的固件更新机制中，对应于微控制器对ATA PIO DOWNLOAD-MICROCODE 0x92命令的处理程序，特别是使用偏移量方法下载固件的逻辑，对应子命令0x03和0x0E。...

SUSE CVE-2022-50446

In the Linux kernel, the following vulnerability has been resolved: ARC: mm: fix leakage of memory allocated for PTE Since commit d9820ff "ARC: mm: switch pgtablet back to struct page " a memory leakage problem occurs. Memory allocated for page table entries not released during process terminatio...

CVE-2022-50446

In the Linux kernel, the following vulnerability has been resolved: ARC: mm: fix leakage of memory allocated for PTE Since commit d9820ff "ARC: mm: switch pgtablet back to struct page " a memory leakage problem occurs. Memory allocated for page table entries not released during process terminatio...

Autonomous Cyber Resilience Via a Co-Evolutionary Arms Race within a Fortified Digital Twin Sandbox

The convergence of IT and OT has created hyper-connected ICS, exposing critical infrastructure to a new class of adaptive, intelligent adversaries that render static defenses obsolete. Existing security paradigms often fail to address a foundational "Trinity of Trust," comprising the fidelity of...