AZL-55376 CVE-2024-56782 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: Add adev NULL check to acpiquirkskipserdevenumeration acpidevhidmatch does not check for adev == NULL, dereferencing it unconditional. Add a check for adev being NULL before calling acpidevhidmatch. At the moment...

PT-2025-4360 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the function get canonical dev path in the Linux kernel's btrfs module. It involves a buffer overflow vulnerability that can be triggered when the d path functi...

PT-2025-30769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the dmaengine subsystem and the idxd driver. When running IDXD workloads within a container with the /dev directory mounted, termination of t...

SUSE CVE-2024-56682

In the Linux kernel, the following vulnerability has been resolved: irqchip/riscv-aplic: Prevent crash when MSI domain is missing If the APLIC driver is probed before the IMSIC driver, the parent MSI domain will be missing, which causes a NULL pointer dereference in msicreatedeviceirqdomain. Avoi...

AZL-54842 CVE-2024-56657 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Avoid WARN for symlink errors Using WARN for showing the error of symlink creations don't give more information than telling that something goes wrong, since the usual code path is a lregister callback from each...

UBUNTU-CVE-2024-56657

In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Avoid WARN for symlink errors Using WARN for showing the error of symlink creations don't give more information than telling that something goes wrong, since the usual code path is a lregister callback from each...

UBUNTU-CVE-2024-56615

In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting elements Jordy reported issue against XSKMAP which also applies to DEVMAP - the index used for accessing map entry, due to being a signed integer, causes the OOB writes. Fix is simple as...

MAL-2024-12134 Malicious code in dev-journey-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 788208b1474e001a223a8caea127bfb7a2d5d4120be3d5ab08e07b886b01b5dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dev-journey-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 788208b1474e001a223a8caea127bfb7a2d5d4120be3d5ab08e07b886b01b5dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12151 Malicious code in launchpad6-dev-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30c80c00a3a3fff99c7e886c9aa19aa90f914ed903e9039de87952a37921e18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in launchpad6-dev-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30c80c00a3a3fff99c7e886c9aa19aa90f914ed903e9039de87952a37921e18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owncloud-customgroups-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6db2fb0d1c0650fa0c9e68fc32c5efc05a4c0571b13308b954b8b68a7c590fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12087 Malicious code in owncloud-customgroups-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6db2fb0d1c0650fa0c9e68fc32c5efc05a4c0571b13308b954b8b68a7c590fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in editions-dev-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e10c5fb118ea2960476ee2fa51f5d3d97e5834b44b3ce58aef95d3fdf1d5a822 The OpenSSF Package Analysis project identified 'editions-dev-workshop' @ 5.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-11924 Malicious code in editions-dev-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e10c5fb118ea2960476ee2fa51f5d3d97e5834b44b3ce58aef95d3fdf1d5a822 The OpenSSF Package Analysis project identified 'editions-dev-workshop' @ 5.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in webpacks-dev-servers (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11495 Malicious code in webpacks-dev-servers (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in perfetto-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ce51161bf477ac257c50c37a9eebd8410cacfe7c99fdd88acb1ddae307a3cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11417 Malicious code in perfetto-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ce51161bf477ac257c50c37a9eebd8410cacfe7c99fdd88acb1ddae307a3cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: bonding: fix xfrm real_dev null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: bonding: fix xfrm realdev null pointer dereference We shouldn't set realdev to NULL because packets can be in transit and xfrm might call xdodevoffloadok in parallel. All callbacks assume realdev is set. Example trace: kernel: BU...