kernel: crypto: seqiv - Handle EBUSY correctly

In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. However, as the caller of seqiv may specify...

EUVD-2025-120029

Malicious code in busy-chocolate-parakeet npm...

RHEL 9 : kernel (RHSA-2025:21051)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21051 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: eventpoll: Fix semi-unbounded...

kernel: powerpc/rtas: avoid scheduling in rtas_os_term()

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtasosterm It's unsafe to use rtasbusydelay to handle a busy status from the ibm,os-term RTAS function in rtasosterm: Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b BUG:...

kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padatadoparallel return -EBUSY Since commit 8f4f68e788c3 "crypto: pcrypt - Fix hungtask for PADATARESET", the pcrypt encryption and decryption operations return -EAGAIN when the CP...

EUVD-2025-71214

Malicious code in busyfowlz3n npm...

Malicious code in busy_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb28b3ec47fab5418439fd21895068c6936c887296154284825b30a7ac889d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55551

Malicious code in busy-blush-minnow npm...

EUVD-2025-55550

Malicious code in busy-bronze-condor npm...

Malicious code in busy-bronze-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319d48c23d38d49cb229c8b2b17016be121d4c0add9ce422e41fa9d13226b7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67099 Malicious code in busy-bronze-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319d48c23d38d49cb229c8b2b17016be121d4c0add9ce422e41fa9d13226b7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67098 Malicious code in busy-blush-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1dc986a18731d221003e4efa1ed28f0db61d5dea44f94c47276a9d0159b817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55549

Malicious code in busy-gold-damselfly npm...

Malicious code in busy-blush-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1dc986a18731d221003e4efa1ed28f0db61d5dea44f94c47276a9d0159b817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55548

Malicious code in busy-red-crow npm...

Malicious code in busy-red-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c6fe9c8bac6d35cac5380035fffe7d7ebf5fed0054472cba672fdba088f5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67100 Malicious code in busy-gold-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce736f4283cc1f46352765c571bc5b5c15f873d9f6ccd6e9538b3e9f1cab4878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990033 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padatadoparallel return -EBUSY Since commit...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990140)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990140 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: free inode when ocfs2getinitinode fails syzbot is reporting busy inodes after unmount, for...

ALSA-2025:19409 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: sr: Fix MAC comparison to be constant-time CVE-2025-39702 kernel: fs: fix UAF/GPF bug in nilfsmdtdestroy CVE-2022-50367 kernel: crypto: xts - Handle EBUSY correctly CVE-2023-53494 F...