CVE-2022-50284

CVE-2022-50284 affects the Linux kernel (init_mqueue_fs). If setup_mq_sysctls() fails, the mqueue_inode_cachep was not released, causing a memory leak. The issue was fixed by reordering the release path in init_mqueue_fs; upstream kernel patches exist to address this, with no explicit exploit det...

CVE-2022-50284 ipc: fix memory leak in init_mqueue_fs()

In the Linux kernel, the following vulnerability has been resolved: ipc: fix memory leak in initmqueuefs When setupmqsysctls failed in initmqueuefs, mqueueinodecachep is not released. In order to fix this issue, the release path is reordered...

Malicious Package

Overview setup-helper-module is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in setup-helper-module

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in setup-helper-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c02c25d78f51cf02062df08594fff995746429e6c4ba2e74b5a6fbddfcfb3e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47204 Malicious code in setup-helper-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c02c25d78f51cf02062df08594fff995746429e6c4ba2e74b5a6fbddfcfb3e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview string-setup-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in string-setup-helper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in string-setup-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bc9eeb3a1bc272c3b55d695ba0aa54a481cfb3ac6c0611bbaadd96cf5cb1935 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47206 Malicious code in string-setup-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bc9eeb3a1bc272c3b55d695ba0aa54a481cfb3ac6c0611bbaadd96cf5cb1935 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-191851 Malicious code in r-irkernel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0d34dbf9f927fd7d2e9b1b97bf72e0063bbccd6f536a9c2e9e40c2f9371abd8e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

drm/msm: Add error handling for krealloc in metadata setup

...

wifi: ath12k: Decrement TID on RX peer frag setup error handling

...

wifi: ath12k: Correct tid cleanup when tid setup fails

...

SUSE CVE-2025-39747

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Add error handling for krealloc in metadata setup Function msmioctlgeminfosetmetadata now checks for krealloc failure and returns -ENOMEM, avoiding potential NULL pointer dereference. Explicitly avoids GFPNOFAIL due to...

AZL-67169 CVE-2025-39779 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: subpage: keep TOWRITE tag until folio is cleaned btrfssubpagesetwriteback calls foliostartwriteback the first time a folio is written back, and it also clears the PAGECACHETAGTOWRITE tag even if there are still dirty block...

CVE-2025-39779

In the Linux kernel, the following vulnerability has been resolved: btrfs: subpage: keep TOWRITE tag until folio is cleaned btrfssubpagesetwriteback calls foliostartwriteback the first time a folio is written back, and it also clears the PAGECACHETAGTOWRITE tag even if there are still dirty block...

AZL-70831 CVE-2025-39779 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: subpage: keep TOWRITE tag until folio is cleaned btrfssubpagesetwriteback calls foliostartwriteback the first time a folio is written back, and it also clears the PAGECACHETAGTOWRITE tag even if there are still dirty block...

CVE-2025-39761

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12kdprxpeerfragsetup. This could lead to out-of-bounds access in peer-rxtid...

AZL-70816 CVE-2025-39747 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Add error handling for krealloc in metadata setup Function msmioctlgeminfosetmetadata now checks for krealloc failure and returns -ENOMEM, avoiding potential NULL pointer dereference. Explicitly avoids GFPNOFAIL due to...