CVE-2025-40189

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix lost EEPROM read timeout error-ETIMEDOUT in lan78xxreadraweeprom Syzbot reported read of uninitialized variable BUG with following call stack. lan78xx 8-1:1.0 unnamed netdevice uninitialized: EEPROM read...

UBUNTU-CVE-2025-40189

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix lost EEPROM read timeout error-ETIMEDOUT in lan78xxreadraweeprom Syzbot reported read of uninitialized variable BUG with following call stack. lan78xx 8-1:1.0 unnamed netdevice uninitialized: EEPROM read...

CVE-2025-40189 net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix lost EEPROM read timeout error-ETIMEDOUT in lan78xxreadraweeprom Syzbot reported read of uninitialized variable BUG with following call stack. lan78xx 8-1:1.0 unnamed netdevice uninitialized: EEPROM read...

CVE-2025-40189 net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix lost EEPROM read timeout error-ETIMEDOUT in lan78xxreadraweeprom Syzbot reported read of uninitialized variable BUG with following call stack. lan78xx 8-1:1.0 unnamed netdevice uninitialized: EEPROM read...

CVE-2025-40189

The CVE-2025-40189 issue affects the Linux kernel’s LAN78xx USB Ethernet driver (drivers/net/usb/lan78xx.c). A read_raw_eeprom timeout (-ETIMEDOUT) could be obscured in the fallthrough path after attempting to restore LED pin configurations, causing the data buffer to be treated as valid despite ...

CVE-2025-40189

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix lost EEPROM read timeout error-ETIMEDOUT in lan78xxreadraweeprom Syzbot reported read of uninitialized variable BUG with following call stack. lan78xx 8-1:1.0 unnamed netdevice uninitialized: EEPROM read...

Malicious code in apasih-led-pokiar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698106f55201b63750d958325d35d7bb42fc2459a1553efad4b8c8a542abee03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144754

Malicious code in apasih-led-pokia npm...

EUVD-2025-144753

Malicious code in apasih-led-pokiar npm...

EUVD-2025-144751

Malicious code in apasih-led-poldoa npm...

EUVD-2025-144752

Malicious code in apasih-led-pokiari npm...

EUVD-2025-144669

Malicious code in aps-led-manda npm...

MAL-2025-172143 Malicious code in aps-led-manda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091088189ee76468bf48cee47a099697915e41e4fc96e540d1b045f31db1421f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-led-pokiari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b6f747aadfde8cadde909f630ce4d92d1197b143a27283f5f64c2029b2afa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144755

Malicious code in apasih-led-poki npm...

Malicious code in apasih-led-pok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae05a0a954977d18ee94aaa1f4042f9bdff4a640051eec0f21b41b829204fa2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144756

Malicious code in apasih-led-pok npm...

From Tabletop to Turnkey: Building Cyber Resilience in Financial Services

Introduction Financial institutions are facing a new reality: cyber-resilience has passed from being a best practice to an operational necessity to a prescriptive regulatory requirement. Crisis management or Tabletop exercises, for a long time relatively rare in the context of cybersecurity, have...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989899 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix not cleanup led when btinit fails btinit calls btledsinit to register led, but if ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989810 advisory. In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightnessshow with ledcdev-ledaccess mutex There is NULL pointer issue...