MAL-2025-34089 Malicious code in strict-null-check-migration-tools (npm)

The package strict-null-check-migration-tools was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-1556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only...

Linux Distros Unpatched Vulnerability : CVE-2025-38143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - backlight: pm8941: Add NULL check in wledconfigure devmkasprintf returns NULL when memory allocation fails. Currently, wledconfigure does not check for this cas...

Linux Distros Unpatched Vulnerability : CVE-2025-22066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-card: Add NULL check in imxcardprobe devmkasprintf returns NULL when memory...

Linux Distros Unpatched Vulnerability : CVE-2025-38361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Check dcehwseq before dereferencing it WHAT hws was checked for null earlier in dce110blankstream, indicating hws can be null, and should be...

Linux Distros Unpatched Vulnerability : CVE-2023-52870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6765: Add check for mtkallocclkdata Add the check for the return value ...

Linux Distros Unpatched Vulnerability : CVE-2025-38145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soc: aspeed: Add NULL check in aspeedlpcenablesnoop devmkasprintf returns NULL when memory allocation fails. Currently, aspeedlpcenablesnoop does not check for...

Linux Distros Unpatched Vulnerability : CVE-2025-38144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovose30wdt: Fix possible devmioremap NULL pointer dereference in...

dmaengine: ti: Add NULL check in udma_probe()

...

soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()

...

gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO

...

backlight: pm8941: Add NULL check in wled_configure()

...

smb: client: add NULL check in automount_fullpath

...

clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()

...

Linux Distros Unpatched Vulnerability : CVE-2025-38070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: sma1307: Add NULL check in sma1307settingloaded All varibale allocated by kzalloc and devmkzalloc could be NULL. Multiple pointer checks and their cleanup...

Linux Distros Unpatched Vulnerability : CVE-2025-21941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix null check for pipectx-planestate in resourcebuildscalingparams Null pointer dereference issue could occur when pipectx-planestate is null...

PT-2025-46631

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw exists in the Linux kernel’s PM / devfreq subsystem, specifically within the mtk-cci component. The drv-sram reg pointer could be assigned an error value, potentially leading to a...

PT-2025-46735

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the pid subsystem, specifically in the task pid nr ns function. A missing null check for the namespace pointer can lead to a kernel panic when a...

SUSE CVE-2025-38361

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check dcehwseq before dereferencing it WHAT hws was checked for null earlier in dce110blankstream, indicating hws can be null, and should be checked whenever it is used. cherry picked from commit...

kernel: nbd: null check for nla_nest_start

In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nlaneststart The Linux kernel CVE team has assigned CVE-2024-27025 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050107-CVE-2024-27025-babd@gregkh/T...