Database/Control plane, storage & DevOps
AMD Optimizing CPU Libraries (AOCL) - DLL hijacking: A DLL search-order hijack in AOCL lets an attacker get
Impact
A DLL search-order hijack in AOCL lets an attacker get their library loaded by a privileged process, reaching arbitrary code execution. Same practical exposure as the AOCL permissions issue: the CPU math libraries underneath your AMD-node ML stack become a privilege-escalation vector.
Who can reach it
Local, requires the ability to place a library where the search order will find it first. Windows-oriented, though the search-path pattern has Linux analogues via LD_LIBRARY_PATH on badly configured hosts.
What to do
Update AOCL. Check that no shared-node job can influence library search paths for privileged processes - on Linux that means auditing LD_LIBRARY_PATH handling in your job launcher and any setuid tooling. Package update, no reboot, no firmware.
References
Related entries
- Dell OpenManage Server Administrator (XSL hijacking local privilege escalation): A local low-privileged user hijacksCVE-2024-37130 · Dell OpenManage Server Administrator (XSL hijacking local privilege escalation)High
- Intel Data Center GPU Flex Series - Windows driver: A further improper access control in the Flex Series Windows driverCVE-2024-45333 · Intel Data Center GPU Flex Series - Windows driverHigh
- Nx @nx/docker: config-controlled shell injection in release commands executes code in the release jobCVE-2026-104859 · Nx @nx/docker release pipeline (repositoryName / registryUrl shell interpolation)High
- ansible.posix authorized_key: a symlink under a user's ~/.ssh redirects a root chown to any pathCVE-2026-11837 · ansible.posix collection - authorized_key module (keyfile() ownership handling)High
- GitLab EE: developer-role user can run arbitrary commands in CI via attacker-controlled agent configCVE-2026-18252 · GitLab EE CI (Claude agent processing configuration from a user-controlled source)High
- Apache Airflow 3.3.0: Dag author reaches arbitrary imports in the scheduler via next_kwargs deserializationCVE-2026-67260 · Apache Airflow scheduler (awaiting_input sweep, next_kwargs deserialization)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.