Selective KV-Cache Sharing to Mitigate Timing Side-Channels in LLM Inference

Global KV-cache sharing has emerged as a key optimization for accelerating large language model LLM inference. However, it exposes a new class of timing side-channel attacks, enabling adversaries to infer sensitive user inputs via shared cache entries. Existing defenses, such as per-user isolatio...

CVE-2025-30767

creationtimestamp| type| source ---|---|--- 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:58+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c...

CVE-2025-24277

creationtimestamp| type| source ---|---|--- 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:56+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-10-03 12:58:48+00:00| seen| https://bsky.app/profile/hexacon.bsky.social/post/3m2c4opaeb22a...

Linux Distros Unpatched Vulnerability : CVE-2023-53052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: fix use-after-free bug in refreshcacheworker The UAF bug occurred because we were putting DFS root sessions in cifsumount while DFS cache refresher was...

CVE-2024-45556

creationtimestamp| type| source ---|---|--- 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:42+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea...

CVE-2024-43065

creationtimestamp| type| source ---|---|--- 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:41+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea...

CVE-2025-32014

creationtimestamp| type| source ---|---|--- 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:40+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea...

CVE-2024-43046

creationtimestamp| type| source ---|---|--- 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:41+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea...

CVE-2025-71303

creationtimestamp| type| source ---|---|--- 2025-08-09 13:26:57+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:40+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27...

CVE-2025-32422

creationtimestamp| type| source ---|---|--- 2025-08-09 13:26:56+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:39+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2026-06-18 18:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molgis6kux2a...

CVE-2025-32596

creationtimestamp| type| source ---|---|--- 2025-08-09 13:26:56+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:39+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27...

Linux Distros Unpatched Vulnerability : CVE-2024-35916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix NULL pointer dereference in sanitycheck If due to a memory allocation failure...

Linux Distros Unpatched Vulnerability : CVE-2021-23963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over...

The vulnerability of the IBM Aspera Faspex file-sharing application, related to incorrect session expiration times, allows attackers to compromise the integrity of the protected information.

The vulnerability of the IBM Aspera Faspex file-sharing application is related to an incorrect session expiration time. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information from a remote location...

Meta accessed women’s health data from Flo app without consent, says court

A jury has ruled that Meta accessed sensitive information from a woman's reproductive health tracking app without consent. The app in question is called Flo Health. Developed in 2015 in Belarus to track menstrual cycles, it has evolved over the years as a tracking app for highly detailed, intimat...

smb: client: fix potential deadlock when reconnecting channels

...

Efficient Mediated Multiparty Semi-Quantum Secret Sharing Protocol Based on Single-Qubit Reordering

Typical multiparty semi-quantum secret sharing MSQSS protocols require the dealer to possess full quantum capabilities, while the classical users usually need to perform three operations. To address this practical limitation, this paper introduces a new mediated MSQSS protocol that enables Alice,...

SUSE CVE-2025-52996

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions 2.32.0 and prior, the implementation of password protected links is error-prone, resulting in potential unprotected sharing of a file...

CVE-2025-7500

The Ocean Social Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via social icon titles in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

A week in security (July 28 – August 3)

Last week on Malwarebytes Labs: Apple ID scam leads to $27,000 in-person theft of Ohio man OpenAI kills "short-lived experiment" where ChatGPT chats could be found on Google Trump Administration and Big Tech want you to share your health data Prison visitor details shared with all inmates at...