New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no exploit and no break-in. That is the claim behind Bit2Watt , described by three Zhejiang University researchers in a paper accepted to CHES 202...

ROS-20260721-73-0040

The vulnerability of the graphics processing units in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to bypass the sandboxing protection mechanisms...

ROS-20260717-73-0011

The vulnerability of Google Chrome browsers’ graphics processing units is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially created HTML page...

CVE-2026-53070

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP over User Datagram Protocol UDP implementation. An issue with managing the transmission context across different processing units could lead to incorrect recursion level detection. This can cause network packets to b...

The vulnerability of the graphics processing units in Google Chrome and Microsoft Edge browsers allows attackers to bypass the sandboxing protection mechanisms.

The vulnerability of the graphics processing units in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to bypass the sandboxing protection mechanisms...

ALPINE-CVE-2025-54505

A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality...

GStreamer 缓冲区错误漏洞

GStreamer is a set of open-source frameworks for processing streaming media. GStreamer has a buffer error vulnerability, which stems from the lack of validation of user data when handling APS units. This vulnerability may lead to out-of-bounds writes and remote code execution...

AMD GPU Timing-Based Side Channels

Revisions Revision Date| Description ---|--- 2026-02-10| Initial publication...

Ex-Google Engineer Convicted for Stealing AI Secrets for China Startup

A former Google engineer accused of stealing thousands of the company's confidential documents to build a startup in China has been convicted in the U.S., the Department of Justice DoJ announced Thursday. Linwei Ding aka Leon Ding, 38, was convicted by a federal jury on seven counts of economic...

CVE-2025-40288 drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices Previously, APU platforms and other scenarios with uninitialized VRAM managers triggered a NULL pointer dereference in ttmresourcemanagerusage. The root cause...

AMD CPU 安全漏洞

AMD CPUs are a family of CPUs from AMD. AMD CPUs suffer from an entropy mishandling vulnerability, no details of the vulnerability are provided at this time...

The vulnerability of the nvdisam utility in the NVIDIA CUDA Toolkit, a software tool for parallel computing on Graphics Processing Units, allows a malicious actor to cause a service failure.

The vulnerability of the nvdisam utility in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the nvdisasm file in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units allows a hacker to execute arbitrary code.

The vulnerability of the nvdisasm tool in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2025-39799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: perflib: Move problematic pr-performance check Commit d33bd88ac0eb ACPI:...

Benchmarking VPUs and GPUs for Media Workloads

...

GPUHammer: New RowHammer Attack Variant Degrades AI Models on NVIDIA GPUs

NVIDIA is urging customers to enable System-level Error Correction Codes ECC as a defense against a variant of a RowHammer attack demonstrated against its graphics processing units GPUs. "Risk of successful exploitation from RowHammer attacks varies based on DRAM device, platform, design...

Dynamic Risk Assessments for Offensive Cybersecurity Agents

Foundation models are increasingly becoming better autonomous programmers, raising the prospect that they could also automate dangerous offensive cyber-operations. Current frontier model audits probe the cybersecurity risks of such agents, but most fail to account for the degrees of freedom...

Comparing Video Processing Units (VPUs), GPUs, and CPUs

More users than ever subscribe to on-demand media streaming and engage with live streaming video over the internet, rather than broadcast television...

USN-7461-2 linux-azure-fips, linux-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - File systems infrastructure; - Ext4 file system; - Network file system NFS server...

CVE-2024-52924

An issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Lack of boundary check during the decoding of Registration...