MAL-2025-157033 Malicious code in jelek-ras-batub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4018e10a25acd00a3f7fc77cb531979299923f73e2b16b6468de2e1055cd755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-ras-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab6b90cf46d9bb5291d0d91fc7c9f687c6297e8de2fd9894a4a2856246247b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46687

Name of the Vulnerable Software and Affected Versions CUPS-Filters versions up to and including 1.28.17 libcupsfilters versions 2.0.0 through 2.1.1 Description CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989430 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix potential null pointer derefernce The amdgpurasgetcontext may return NULL if devi...

CVE-2023-53723

The CVE-2023-53723 issue is in the Linux kernel’s AMDGPU/SDMA path. The fix prevents disabling the ECC IRQ unconditionally in sdma_v4_0_hw_fini when SDMA ECC is not enabled, which would cause a suspend-cycle warning on some ASICS with SDMA IP v4.0. The root cause is that sdma_v4_0_hw_fini previou...

CVE-2023-53628

CVE-2023-53628 affects the Linux kernel drm/amdgpu path. The issue arises from the gfx_v11_0_cp_ecc_error_irq_funcs being retired in gfx11; gfx_v11_0_hw_fini still called amdgpu_irq_put to disable the interrupt, which led to a call trace during suspend/reset. The patch history (v2–v5) shows separ...

EUVD-2020-24203

Malware in sbrugna...

EUVD-2001-0045

Malware in sbrugna...

EUVD-2020-20853

Malware in sbrugna...

EUVD-2025-22659

Malicious code in bioql PyPI...

EUVD-2022-48350

Malicious code in bioql PyPI...

EUVD-2025-11048

Malicious code in bioql PyPI...

EUVD-2025-31915

Malicious code in bioql PyPI...

SUSE CVE-2023-53471

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: disable gfx9 cpeccerrorirq only when enabling legacy gfx ras gfx9 cpeccerrorirq is only enabled when legacy gfx ras is assert. So in gfxv90hwfini, interrupt disablement for cpeccerrorirq should be executed under...

CVE-2023-53471

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: disable gfx9 cpeccerrorirq only when enabling legacy gfx ras gfx9 cpeccerrorirq is only enabled when legacy gfx ras is assert. So in gfxv90hwfini, interrupt disablement for cpeccerrorirq should be executed under...

UBUNTU-CVE-2023-53471

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: disable gfx9 cpeccerrorirq only when enabling legacy gfx ras gfx9 cpeccerrorirq is only enabled when legacy gfx ras is assert. So in gfxv90hwfini, interrupt disablement for cpeccerrorirq should be executed under...

CVE-2023-53471 drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: disable gfx9 cpeccerrorirq only when enabling legacy gfx ras gfx9 cpeccerrorirq is only enabled when legacy gfx ras is assert. So in gfxv90hwfini, interrupt disablement for cpeccerrorirq should be executed under...

CVE-2023-53471

The CVE-2023-53471 issue affects the Linux kernel’s DRM AMDGPU driver (gfx9). The root cause is that gfx9 cp_ecc_error_irq was enabled only when legacy gfx ras is asserted, but gfx_v9_0_hw_fini may disable cp_ecc_error_irq outside that condition, leading to an amdgpu_irq_put calltrace. Affected p...

CVE-2023-31322

Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application RAS TA potentially leading to a read or write to shared memory resulting in loss of confidentiality, integrity, or availability...

CVE-2023-31322

CVE-2023-31322 is described as a type confusion in the ASP that could let an attacker pass a malformed argument to the Reliability, Availability, and Serviceability (RAS) trusted application, potentially enabling local read/write to shared memory and leading to loss of confidentiality and integri...