<\/div>\n

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Mali GPU Kernel Driver, PHP bugs to its Known Exploited Vulnerabilities catalog.<\/h2>\n\n\n\n

The U.S. Cybersecurity and Infrastructure Security Agency (CISA)\u00a0added<\/a> the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog<\/a>:<\/p>\n\n\n\n

\n
• CVE-2024-4610<\/a> ARM Mali GPU Kernel Driver Use-After-Free Vulnerability<\/li>\n\n\n\n
• CVE-2024-4577<\/a> PHP-CGI OS Command Injection Vulnerability<\/li>\n<\/ul>\n\n\n\n

  <\/gwmw><\/gwmw>The vulnerability CVE-2024-4610<\/a> is a use-after-free issue issue that impacts Bifrost GPU Kernel Driver<\/a> (all versions from r34p0 to r40p0) and Valhall GPU Kernel Driver<\/a> (all versions from r34p0 to r40p0).<\/p>\n\n\n\n

  \u201cA local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.\u201d reads the advisory<\/a> published by the company. \u201cArm is aware of reports of this vulnerability being exploited in the wild. Users are recommended to upgrade if they are impacted by this issue\u201d<\/gwmw><\/p>\n\n\n\n

  Bifrost and Valhall GPU Kernel Driver r41p0, which were released on November 24, 2022, address the vulnerability.<\/p>\n\n\n\n

  A local non-privileged attacker can prepare the system\u2019s memory to issue improper GPU memory processing operations to gain access to already freed memory.<\/p>\n\n\n\n

  The company recommends users upgrade if this issue impacts them.<\/p>\n\n\n\n

  The vulnerability CVE-2024-4577<\/a> resides in the Best-Fit feature of encoding conversion within the Windows operating system. An attacker can exploit the flaw to bypass protections for a previous vulnerability, CVE-2012-1823, using specific character sequences. Consequently, arbitrary code can be executed on remote PHP servers through an argument injection attack, allowing attackers to take control of vulnerable servers.<\/p>\n\n\n\n

  Since the disclosure of the vulnerability and publicly availability of a PoC exploit code, multiple actors are attempting to exploit it, reported Shadowserver and GreyNoise researchers.<\/p>\n\n\n\n

  According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities<\/a>, FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog.<\/gwmw><\/gwmw><\/gwmw><\/gwmw><\/gwmw><\/gwmw><\/gwmw><\/p>\n\n\n\n

  Experts recommend also private organizations review the Catalog<\/a> and address the vulnerabilities in their infrastructure.<\/gwmw><\/p>\n\n\n\n

  CISA orders federal agencies to fix this vulnerability by July 3rd, 2024.<\/p>\n\n\n\n

  Pierluigi Paganini<\/strong><\/a><\/gwmw><\/p>\n\n\n\n

  Follow me on Twitter: @securityaffairs<\/strong><\/a> and Facebook<\/strong><\/a> and Mastodon<\/strong><\/a><\/p>\n\n\n\n

  (<\/strong>SecurityAffairs<\/strong><\/a> \u2013<\/strong> hacking, Known Exploited Vulnerabilities catalog)<\/strong><\/p>\n\n\n\n

  <\/gwmw><\/p>\n","protected":false},"excerpt":{"rendered":"

  U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Mali GPU Kernel Driver, PHP bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)\u00a0added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: The vulnerability CVE-2024-4610 is a use-after-free issue issue that impacts Bifrost GPU Kernel Driver (all versions from r34p0 to r40p0) and Valhall […]<\/p>\n","protected":false},"author":1,"featured_media":106349,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3323,5,55],"tags":[2895,8913,4112,9508,9506,10918,12584,1315,687,841,1533],"class_list":["post-164488","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-breaking-news","category-hacking","category-security","tag-arm","tag-cisa","tag-hacking","tag-hacking-news","tag-information-security-news","tag-it-information-security","tag-known-exploited-vulnerabilities-catalog","tag-php","tag-pierluigi-paganini","tag-security-affairs","tag-security-news"],"yoast_head":"\n