# IOMMU

Published articles for IOMMU.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## GPU Driver Attacks on Android and Their Mitigation in KasperskyOS

DevFeed: [GPU Driver Attacks on Android and Their Mitigation in KasperskyOS](<https://devfeed.tech/articles/iommu-23096.md>)

Original publisher: [Read original article](<https://habr.com/ru/companies/kaspersky/articles/992032/>)

Author: denis\_molodyakov ("Лаборатория Касперского")

Published: 2026-02-25T15:14:03Z

Content type: tutorial

Language: ru

Sources: ["Лаборатория Касперского" RU](<https://devfeed.tech/sources/ru-2.md>)

Topics: [GPU](<https://devfeed.tech/topics/gpu.md>), [Security](<https://devfeed.tech/topics/security.md>), [SELinux](<https://devfeed.tech/topics/selinux.md>), [Arm](<https://devfeed.tech/topics/arm.md>), [LineageOS](<https://devfeed.tech/topics/lineageos.md>)

Tags: [android](<https://devfeed.tech/tags/android.md>), [arm](<https://devfeed.tech/tags/arm.md>), [dma](<https://devfeed.tech/tags/dma.md>), [gpu](<https://devfeed.tech/tags/gpu.md>), [iommu](<https://devfeed.tech/tags/iommu.md>), [kasperskyos](<https://devfeed.tech/tags/kasperskyos.md>), [security](<https://devfeed.tech/tags/security.md>), [selinux](<https://devfeed.tech/tags/selinux.md>), [tag-33729a63fe14](<https://devfeed.tech/tags/tag-33729a63fe14.md>), [tag-a6bf72199ce9](<https://devfeed.tech/tags/tag-a6bf72199ce9.md>), [tag-c87ceb311a81](<https://devfeed.tech/tags/tag-c87ceb311a81.md>), [tag-cc2a6346d835](<https://devfeed.tech/tags/tag-cc2a6346d835.md>)

### AI overview

This article explains attacks against GPU drivers, focusing on Android devices with integrated ARM Mali accelerators. It describes memory-management and use-after-free attack cases, including one that could enable full device access and disable SELinux, and discusses how similar scenarios are mitigated in the microkernel-based KasperskyOS.

### Source excerpt

Что вы знаете об атаках на графические процессоры? Наверняка ничего приятного: они крайне распространены на мобильных устройствах, классические "песочницы" от них не защищают, и компрометация лишь одного драйвера может поставить под угрозу все ядро... Меня зовут Денис Молодяков, и я -- лид команды графики в KasperskyOS. Идея этого текста возникла во время одного моего выступления на конференции по системной разработке. Тогда из зала задали вопрос, который касался безопасности работы драйверов GPU. Слушатель ссылался на кейсы с "подламыванием" механизма управления видеопамятью драйверов на Android для интегрированных ускорителей семейства ARM Mali и спросил, как наша ОС сможет этому противостоять. Поэтому в данном материале я подробно расскажу о сути этой коварной атаки, а также рассмотрю и другие типы атак через GPU. В заключение я смоделирую подобные сценарии для нашей микроядерной KasperskyOS и покажу, как мы их митигируем. Читать далее

## QEMU version 10.0.0 released

DevFeed: [QEMU version 10.0.0 released](<https://devfeed.tech/articles/qemu-version-10-0-0-released-32652.md>)

Original publisher: [Read original article](<https://www.qemu.org/2025/04/23/qemu-10-0-0/>)

Published: 2025-04-23T18:14:00Z

Content type: release

Language: en

Sources: [QEMU](<https://devfeed.tech/sources/qemu.md>)

Topics: [qemu](<https://devfeed.tech/topics/qemu.md>), [version](<https://devfeed.tech/topics/version.md>), [Availability](<https://devfeed.tech/topics/availability.md>), [cpu](<https://devfeed.tech/topics/cpu.md>), [RISC-V](<https://devfeed.tech/topics/riscv.md>), [Arm](<https://devfeed.tech/topics/arm.md>), [virtio](<https://devfeed.tech/topics/virtio.md>), [Documentation](<https://devfeed.tech/topics/documentation.md>), [IOMMU](<https://devfeed.tech/topics/iommu.md>), [Mainframe](<https://devfeed.tech/topics/mainframe.md>), [ci](<https://devfeed.tech/topics/ci.md>)

Tags: [arm](<https://devfeed.tech/tags/arm.md>), [availability](<https://devfeed.tech/tags/availability.md>), [ci](<https://devfeed.tech/tags/ci.md>), [cpu](<https://devfeed.tech/tags/cpu.md>), [documentation](<https://devfeed.tech/tags/documentation.md>), [improvements](<https://devfeed.tech/tags/improvements.md>), [iommu](<https://devfeed.tech/tags/iommu.md>), [qemu](<https://devfeed.tech/tags/qemu.md>), [qemu-10-0](<https://devfeed.tech/tags/qemu-10-0.md>), [release](<https://devfeed.tech/tags/release.md>), [releases](<https://devfeed.tech/tags/releases.md>), [risc-v](<https://devfeed.tech/tags/risc-v.md>), [speed](<https://devfeed.tech/tags/speed.md>), [version](<https://devfeed.tech/tags/version.md>), [virtio](<https://devfeed.tech/tags/virtio.md>), [x86](<https://devfeed.tech/tags/x86.md>)

### AI overview

QEMU 10.0.0 has been released with more than 2,800 commits from 211 authors. Highlights include virtio-scsi multiqueue support, improved Intel IGD passthrough, expanded architecture emulation, new board and CPU models, documentation improvements, and faster string-instruction emulation.

### Source excerpt

We'd like to announce the availability of the QEMU 10.0.0 release. This release contains 2800+ commits from 211 authors.

## QEMU version 9.2.0 released

DevFeed: [QEMU version 9.2.0 released](<https://devfeed.tech/articles/qemu-version-9-2-0-released-32650.md>)

Original publisher: [Read original article](<https://www.qemu.org/2024/12/11/qemu-9-2-0/>)

Published: 2024-12-11T23:42:00Z

Content type: release

Language: en

Sources: [QEMU](<https://devfeed.tech/sources/qemu.md>)

Topics: [qemu](<https://devfeed.tech/topics/qemu.md>), [version](<https://devfeed.tech/topics/version.md>), [Availability](<https://devfeed.tech/topics/availability.md>), [virtio](<https://devfeed.tech/topics/virtio.md>), [GPU](<https://devfeed.tech/topics/gpu.md>), [Rust](<https://devfeed.tech/topics/rust.md>), [Arm](<https://devfeed.tech/topics/arm.md>), [RISC-V](<https://devfeed.tech/topics/riscv.md>), [x86](<https://devfeed.tech/topics/x86.md>), [IOMMU](<https://devfeed.tech/topics/iommu.md>), [Compression](<https://devfeed.tech/topics/compression.md>)

Tags: [3d](<https://devfeed.tech/tags/3d.md>), [accelerated](<https://devfeed.tech/tags/accelerated.md>), [announce](<https://devfeed.tech/tags/announce.md>), [arm](<https://devfeed.tech/tags/arm.md>), [availability](<https://devfeed.tech/tags/availability.md>), [compression](<https://devfeed.tech/tags/compression.md>), [cpu](<https://devfeed.tech/tags/cpu.md>), [gpu](<https://devfeed.tech/tags/gpu.md>), [integrity](<https://devfeed.tech/tags/integrity.md>), [iommu](<https://devfeed.tech/tags/iommu.md>), [qemu](<https://devfeed.tech/tags/qemu.md>), [qemu-9-2](<https://devfeed.tech/tags/qemu-9-2.md>), [release](<https://devfeed.tech/tags/release.md>), [releases](<https://devfeed.tech/tags/releases.md>), [risc-v](<https://devfeed.tech/tags/risc-v.md>), [rust](<https://devfeed.tech/tags/rust.md>), [venus](<https://devfeed.tech/tags/venus.md>), [version](<https://devfeed.tech/tags/version.md>), [virtio](<https://devfeed.tech/tags/virtio.md>), [vulkan](<https://devfeed.tech/tags/vulkan.md>), [x86](<https://devfeed.tech/tags/x86.md>)

### AI overview

QEMU 9.2.0 has been released with more than 1,700 commits from 209 authors. Highlights include improved virtio-GPU Vulkan and Venus support, migration compression, experimental Rust device models, and new architecture and accelerator features.

### Source excerpt

We'd like to announce the availability of the QEMU 9.2.0 release. This release contains 1700+ commits from 209 authors.

## Preparing a Proxmox Server for Production Use

DevFeed: [Preparing a Proxmox Server for Production Use](<https://devfeed.tech/articles/before-i-do-anything-on-proxmox-i-do-this-first-10534.md>)

Original publisher: [Read original article](<https://technotim.com/posts/first-11-things-proxmox/>)

Author: Techno Tim

Published: 2020-11-28T14:00:00Z

Content type: tutorial

Language: en

Sources: [Techno Tim](<https://devfeed.tech/sources/techno-tim.md>)

Topics: [Proxmox](<https://devfeed.tech/topics/proxmox.md>), [networking](<https://devfeed.tech/topics/networking.md>), [ceph](<https://devfeed.tech/topics/ceph.md>), [Linux](<https://devfeed.tech/topics/linux.md>)

Tags: [ceph](<https://devfeed.tech/tags/ceph.md>), [clustering](<https://devfeed.tech/tags/clustering.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [iommu](<https://devfeed.tech/tags/iommu.md>), [linux](<https://devfeed.tech/tags/linux.md>), [networking](<https://devfeed.tech/tags/networking.md>), [proxmox](<https://devfeed.tech/tags/proxmox.md>), [ssh](<https://devfeed.tech/tags/ssh.md>), [storage](<https://devfeed.tech/tags/storage.md>), [tutorials](<https://devfeed.tech/tags/tutorials.md>)

### AI overview

A tutorial covering the author's preparation steps for newly installed Proxmox servers, including updates, storage, networking and VLANs, ISO uploads, clustering, PCI passthrough, cloned Linux machine cleanup, and alerts.

### Source excerpt

After setting up my Proxmox servers, there are a few things I do before I use them for their intended purpose.This ranges from updates, to storage, to networking and VLANS, to uploading ISOs, to clustering, and more.Join me as we pick up where the rest of the proxmox tutorials stop, and that's everything you need to do to make these production ready (and maybe a bonus item too). 📺 Watch Vide...