AZL-70064 CVE-2025-40180 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

UBUNTU-CVE-2025-40180

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

UBUNTU-CVE-2025-40192

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

CVE-2025-40192 Revert "ipmi: fix msg stack when IPMI is disconnected"

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

CVE-2025-40192

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

CVE-2025-40192

CVE-2025-40192 concerns the Linux kernel where a revert of the IPMI msg-stack fix (ipmi: fix msg stack when IPMI is disconnected) introduced a subtle bug. According to the description, certain BMCs can cause the IPMI driver to enter an infinite loop when misbehaving in a specific way, and reports...

CVE-2025-40180

The CVE-2025-40180 fix applies to the Linux kernel mailbox driver for zynqmp-ipi. The cleanup loop started at the wrong array index, causing out-of-bounds memory access. The patch starts the loop at the correct index for zero-based arrays to prevent memory overrun and memory safety issues. Remedi...

CVE-2025-40180 mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

MAL-2025-181441 Malicious code in baso81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6b7651f46986b656741d0f4804751981aebbd24718f11d523b1de51b03eb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d04eb8ab94bb5bbf59091db66d912a83ffff2b31e18e8f6420c3128f94a2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f75b65d5658121d90cab9073f180064d9f786349b965f5b15f2bc93050f45c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180576 Malicious code in teate-thy-sonic-juguke (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b7f2485417e960bf0a21bbb72fd7b85a7757145792647ae43a5b07592fcc80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181088 Malicious code in teate-thy-sonic-wejdiz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067723b1bb1452c95382bee36749b949ec64550580f1d21ae9be6b1e9f07a8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181121 Malicious code in teate-thy-sonic-zacam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d791cfce26f0826292210a4f58c51526758b7d9760d1a133cc6de52766048acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181156 Malicious code in teate-thy-sonic-zurme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fcaee1fa3ef3e0e421a609ed5982c97ef67fd811f4e43e66c65fa8cb404927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179797 Malicious code in lookingan-jaja21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9205c8decf05a14238aeba9177207e60d6d2170fde8545931048ab360a5b46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-efiuivcafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac024110b55a1d765bd54813bcf56efbcbd548576ec0804b563af8f386374110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papmoa-yama0paiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816394c40772cbc527d0d6d21e86b2e429a39ad04bec509f847c9c3fc9b6a92a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-balgob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908b909e038b349bbd3797b4f2e0a321baf4c48023f31c4eea5e5bb9a10d8a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180111 Malicious code in teate-thy-py-ufez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28337cad78569317cc73998d97de3a93d6529b13a7024d22dff1a36d0138700a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...