Malicious code in heka-webpack-init-prompts (npm)

Source: amazon-inspector eaa25d9b845420bb88d426ddf06a8cb9cb64c883ebb02a093672626c7e7b8637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grunt-cross-env-init-phenomic (npm)

Source: amazon-inspector 34decaafc378b9a592dd5041b73feaad1354d542ee8269da457cd618683baf7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in got-umbriel-bootes-init (npm)

Source: amazon-inspector 3af263708a4f3826d4a9cec48859fffbdd13f5d22aa662e98d5196726b365e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cloud-init (UTSA-2023-001587)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001587 advisory. Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords...

Linux Distros Unpatched Vulnerability : CVE-2026-89668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: move nfsddebugfsinit after nfsd4initslabs in initnfsd nfsddebugfsinit runs before nfsd4initslabs in initnfsd. If the slab allocation fails, the bare retur...

Linux Distros Unpatched Vulnerability : CVE-2026-80940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw88: pci: fix resource leak on failed NAPI setup rtwpciprobe allocates PCI resources through rtwpcisetupresource before it sets up NAPI. If rtwpcinapiin...

Linux Distros Unpatched Vulnerability : CVE-2026-80953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: master: adi: initialize the lock before enabling interrupts adii3cmasterprobe requests the IRQ and unmasks REGIRQPENDINGCMDR before the controller's IBI...

Linux Distros Unpatched Vulnerability : CVE-2026-89597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: uvesafb: unregister connector callback on init failure uvesafbinit registers the v86d connector callback before registering the platform driver. If...

Linux Distros Unpatched Vulnerability : CVE-2026-89624

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback...

CVE-2026-81015

A flaw was found in the Linux kernel's AMD PMC Power Management Controller driver. When the amdstbs2dinit function fails during the driver's initialization process, it can lead to unreleased resources, specifically the LPS0 s2idle handler and debugfs directory. This resource leak can corrupt...

CVE-2026-89668

In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsddebugfsinit after nfsd4initslabs in initnfsd nfsddebugfsinit runs before nfsd4initslabs in initnfsd. If the slab allocation fails, the bare "return retval" bypasses nfsddebugfsexit, leaving orphan debugfs files wit...

DEBIAN-CVE-2026-89624

In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback initialisation fails, returns the error through a label that only does "return...

CVE-2026-89624

In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback initialisation fails, returns the error through a label that only does "return...

AZL-100139 CVE-2026-89599 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicmprobe registers the display before initializing ddata-lock. Once omapdssregisterdisplay publishes the display, another consumer can reach a dsicm callba...

CVE-2026-89597

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafbinit registers the v86d connector callback before registering the platform driver. If platformdriverregister fails, the function returns the error directly and...

AZL-100824 CVE-2026-89597 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafbinit registers the v86d connector callback before registering the platform driver. If platformdriverregister fails, the function returns the error directly and...

DEBIAN-CVE-2026-89597

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafbinit registers the v86d connector callback before registering the platform driver. If platformdriverregister fails, the function returns the error directly and...

CVE-2026-89582

In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2xinitfirmware error path bnx2xinitfirmware frees bp-initops, bp-initdata and bp-initopsoffsets in its error path without setting them to NULL. The cleanup function bnx2xreleasefirmware frees the same...

AZL-100712 CVE-2026-89582 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2xinitfirmware error path bnx2xinitfirmware frees bp-initops, bp-initdata and bp-initopsoffsets in its error path without setting them to NULL. The cleanup function bnx2xreleasefirmware frees the same...

DEBIAN-CVE-2026-89582

In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2xinitfirmware error path bnx2xinitfirmware frees bp-initops, bp-initdata and bp-initopsoffsets in its error path without setting them to NULL. The cleanup function bnx2xreleasefirmware frees the same...