PT-2025-51710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the Bluetooth subsystem, specifically in the btusb mediatek component. A null pointer dereference can occur when releasing the MediaTek ISO...

CVE-2025-40141: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on isoconnfree This attempt to fix similar issue to scoconnfree where if the conn-sk is not set to NULL may lead to UAF on isoconnfree...

Linux Distros Unpatched Vulnerability : CVE-2025-40141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: Fix possible UAF on isoconnfree This attempt to fix similar issue to scoconnfree where if the conn-sk is not set to NULL may lead to UAF on...

kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv()

A potential CAN frame reception race flaw was found in isotprcv in the Linux kernel. This vulnerability may lead to a crash...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988989)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988989 advisory. In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotpbind Syzbot created an environment that lead to a stat...

CVE-2025-12357

By manipulating the Signal Level Attenuation Characterization SLAC protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close...

CVE-2025-12357: Improper Restriction of Communication Channel to Intended Endpoints

By manipulating the Signal Level Attenuation Characterization SLAC protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close...

CVE-2025-54549 Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO

Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO...

CVE-2025-54549 Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO

Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO...

CVE-2025-54549

CVE-2025-54549 affects Arista DANZ Monitoring Fabric, Converged Cloud Fabric, CloudVision Appliance, and Multi-Cloud Director; issue is bypass of cryptographic validation of upgrade images via a crafted upgrade ISO. Arista Fixed versions: DMF 8.7.1+ (and 8.6.2+/8.5.3+/8.4.6+), CCF 6.2.5+, CVA 7.1...

CVE-2025-54549: Improper Verification of Cryptographic Signature

Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO...

Linux Distros Unpatched Vulnerability : CVE-2023-53673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: call disconnect callback before deleting conn In hcicsdisconnect, we do...

Malicious Package

Overview kn-nf-iso-properties-kn1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in kn-nf-iso-properties-kn1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e349cd8ee6d112ba517b1bff5224e8112499adc0c166697081b2f94290edd1c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview nf-iso-properties is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48294 Malicious code in nf-iso-properties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3931e1fe9c0a20bbdeb1e532f664f5e95b84b7c831342802db5c9d74795d0c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33592

Malicious code in nf-iso-properties npm...

EUVD-2025-33593

Malicious code in kn-nf-iso-properties-kn1 npm...

Malicious code in nf-iso-properties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3931e1fe9c0a20bbdeb1e532f664f5e95b84b7c831342802db5c9d74795d0c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48293 Malicious code in kn-nf-iso-properties-kn1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e349cd8ee6d112ba517b1bff5224e8112499adc0c166697081b2f94290edd1c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...