Linux admins -

If you've played around with large language models and AI on Linux, chances are you've come across the NVIDIA TensorRT-LLM framework. It's a great way for Linux security admins to analyze logs, network traffic, or system info to identify unusual patterns indicative of malware or intrusion.

And if you're currently using it, you should know about a validation flaw that could allow attackers to inject code to gain access to other processes on your system. Also related is that many admins disable one of the features designed to help protect against these threats.

Read on to learn more about the TensorRT-LLM exploit and how it might affect you.

You'll also learn about a 20-year browser history privacy flaw recently fixed in Chrome that could enable malicious actors to track and profile without your permission and compromise system integrity.

If you found value in today’s newsletter, please share it with your friends! Do you have a Linux security-related topic you'd like to cover for our audience? We welcome contributions from passionate and insightful community members who share our love for Linux and security.

Yours in Open Source, 

Dv Signature Newsletter 2024 Esm W150

Dave Wreski

LinuxSecurity Founder

TensorRT-LLM

The Discovery 

A critical validation flaw was recently discovered in NVIDIA's TensorRT-LLM framework, a high-performance library designed to optimize and deploy large language models (LLMs) for production use.

Nvidia Esm W300

The Impact

This issue could allow attackers to inject code to gain access to other processes on your system.

 The Fix

Nvidia has released essential patch updates to fix this dangerous flaw. All impacted admins should update as soon as possible to protect the security of their systems and the confidentiality of their data.

Your Related Advisories:

[distro_list_1]

Chrome

The Discovery 

A 20-year browser history privacy flaw, along with a heap buffer overflow and DevTool weaknesses, was recently discovered in Google Chrome.

Chrome Esm W112

The Impact

These issues could enable malicious actors to track and profile without your permission and compromise system integrity.

 The Fix

Chrome 136 fixes these dangerous privacy and security flaws. All affected admins should apply these updates immediately to protect their systems and safeguard the privacy of their web browsing activities.

Your Related Advisories:

[distro_list_2]