drovorub-hunt

Dispatches from Drovorub: Network Threat Hunting for Russia GRU GTsSS' Malware at Scale Recently, the National Security Agency and Federal Bureau of Investigation released a report outlining command and control capabilities leveraged by the Russian General Staff Main Intelligence Directorate GRU...

AntiVE-BehaviorWatch

AntiVE-BehaviorWatch Embedded AI-powered human behavior verification for cybersecurity research. What is AntiVE-BehaviorWatch? AntiVE-BehaviorWatch is a Windows-based cybersecurity research project that explores a new approach to execution control using embedded artificial intelligence. Instead o...

ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

Summary ONNX shape inference performed an out-of-bounds read when processing a malformed RNN, GRU, or LSTM node from opsets 1–6 whose first input had a rank other than three. RNNShapeInferenceopset1to6 checked whether the input shape was present but accessed dim0 and dim1 without first checking i...

GHSA-48M4-24CQ-37QF ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

Summary ONNX shape inference performed an out-of-bounds read when processing a malformed RNN, GRU, or LSTM node from opsets 1–6 whose first input had a rank other than three. RNNShapeInferenceopset1to6 checked whether the input shape was present but accessed dim0 and dim1 without first checking i...

EUVD-2026-110040

ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference Old Opsets, Missing Rank Check...

DEBIAN-CVE-2026-115919

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInferenceopset1to6 processes malformed RNN and LSTM nodes from opsets 1 through 6 and GRU nodes from opsets 3 through 6 without verifying that the first input has rank three. The...

UBUNTU-CVE-2026-115919

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInferenceopset1to6 processes malformed RNN and LSTM nodes from opsets 1 through 6 and GRU nodes from opsets 3 through 6 without verifying that the first input has rank three. The...

CVE-2026-115919 ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInferenceopset1to6 processes malformed RNN and LSTM nodes from opsets 1 through 6 and GRU nodes from opsets 3 through 6 without verifying that the first input has rank three. The...

CVE-2026-115919

The Open Neural Network Exchange (ONNX) framework contains an Out-of-Bounds Read vulnerability in versions prior to 1.22.0 . The root cause is located in the RNNShapeInference_opset1_to_6() function, which fails to verify that the first input has rank three when processing RNN and LSTM nodes (ops...

CVE-2026-90383

A flaw was found in the Linux kernel's SGI GRU Graphics Resource Unit TLB Translation Lookaside Buffer miss handler. This handler incorrectly walks a process's page tables without holding necessary locks or references, and uses kernel page-table accessors on user page tables. This could allow a...

SUSE CVE-2026-90383

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...

Linux Distros Unpatched Vulnerability : CVE-2026-90383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference ...

AZL-102504 CVE-2026-90383 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...

DEBIAN-CVE-2026-90383

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...

CVE-2026-90383

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...

CVE-2026-90383 misc: sgi-gru: remove interrupt-context page-table walks

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...

CVE-2026-90383 misc: sgi-gru: remove interrupt-context page-table walks

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...

CVE-2026-90383

CVE-2026-90383 affects the Linux kernel's SGI GRU (General Register Unit) driver. The GRU TLB miss handler walks a process's page tables in interrupt context without holding page-table locks or a reference to the mapped page, and uses a kernel page-table accessor on user page tables, supporting o...

EUVD-2026-82044

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...

CVE-2026-90383: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...