CVE-2022-49198

In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix crash due to tcptsortedanchor was initialized before release skb Got crash when doing pressure test of mptcp: =========================================================================== dstrelease: dst:ffffa06ce6e5c058...

CVE-2022-49176 bfq: fix use-after-free in bfq_dispatch_request

In the Linux kernel, the following vulnerability has been resolved: bfq: fix use-after-free in bfqdispatchrequest KASAN reports a use-after-free report when doing normal scsi-mq test 69832.239032 ================================================================== 69832.241810 BUG: KASAN:...

CVE-2021-47640 powerpc/kasan: Fix early region not updated correctly

In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Fix early region not updated correctly The shadow's page table is not updated when PTERPNSHIFT is 24 and PAGESHIFT is 12. It not only causes false positives but also false negative as shown the following text. Fix ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the i40e driver not properly handling concurrent calls to the PF reset and ethtool tests in the...

CLSA-2025-1739822224 samba: Fix of CVE-2023-34968

Fix CVE-2023-34968: fix path disclosure vulnerability by sanitizing search query results - Delete fixed tests from knowfail list...

Malicious code in pnpm-sync-api-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ff8a3208b0a7303df5e44ee0ec9bcc028b58bffe1fdabfbea89ab56a78cf841 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1256 Malicious code in pnpm-sync-api-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ff8a3208b0a7303df5e44ee0ec9bcc028b58bffe1fdabfbea89ab56a78cf841 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-52925

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't fail inserts if duplicate has expired nftables selftests fail: run-tests.sh testcases/sets/0044intervaloverlap0 Expected: 0-2 . 0-3, got: W: FAILED ./testcases/sets/0044intervaloverlap0: got 1 Insertion...

CVE-2022-33232

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory...

CVE-2025-24964 Remote Code Execution when accessing a malicious website while Vitest API server is listening

Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site WebSocket hijacking CSWSH attacks. When api option is enabled Vitest UI enables it, Vitest starts a...

CLSA-2025-1738696117 php: Fix of CVE-2024-8929

CVE-2024-8929: fix various heap buffer over-reads for mysqlnd - Modify spec and run-tests.php to fix extension loading during testing...

Malicious code in apple-tests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ff93f95d8e6235296a34bf00a2cf834bcb64673a71326fba527454a5edaf89 Any computer that has this package installed or running should be considered...

MAL-2025-1016 Malicious code in apple-tests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ff93f95d8e6235296a34bf00a2cf834bcb64673a71326fba527454a5edaf89 Any computer that has this package installed or running should be considered...

Cisco Finds DeepSeek R1 Highly Vulnerable to Harmful Prompts

DeepSeek R1, a cost-efficient AI model, achieves impressive reasoning but fails all safety tests in a new study…...

SUSE-SU-2025:20054-1 Security update for kubevirt

This update for kubevirt fixes the following issues: - Update to version 1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.0 - Fix DV error report via VM printable status - Fix permission error in...

Malicious code in lyft-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 115bad0fa70cde21c6adc84e89cc502d81a28568a9b34867b1fcad432dc49050 The OpenSSF Package Analysis project identified 'lyft-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-540 Malicious code in lyft-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 115bad0fa70cde21c6adc84e89cc502d81a28568a9b34867b1fcad432dc49050 The OpenSSF Package Analysis project identified 'lyft-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in linkedin-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 190f39385920feb169d7fe6cc41ab7694f2ec357829ed626244c651f4980daf4 The OpenSSF Package Analysis project identified 'linkedin-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-516 Malicious code in linkedin-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 190f39385920feb169d7fe6cc41ab7694f2ec357829ed626244c651f4980daf4 The OpenSSF Package Analysis project identified 'linkedin-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c19206514a18f90dae516ee3236692ac0674022dc38e842c9a54938c4fad3c0 The OpenSSF Package Analysis project identified 'godaddy-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...