CVE-2025-68215

CVE-2025-68215 concerns the Linux kernel ice driver. The vulnerability arises from improper cleanup of PTP resources on driver removal or error paths, where ice_ptp_cleanup_pf and ps_lock deinitialization could be skipped and the PTP clock may remain unregistered in error scenarios. The consequen...

CVE-2025-68215 ice: fix PTP cleanup on driver removal in error path

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP cleanup on driver removal in error path Improve the cleanup on releasing PTP resources in error path. The error case might happen either at the driver probe and PTP feature initialization or on PTP restart errors in...

CVE-2025-68215 ice: fix PTP cleanup on driver removal in error path

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP cleanup on driver removal in error path Improve the cleanup on releasing PTP resources in error path. The error case might happen either at the driver probe and PTP feature initialization or on PTP restart errors in...

CVE-2025-68213 idpf: fix possible vport_config NULL pointer deref in remove

In the Linux kernel, the following vulnerability has been resolved: idpf: fix possible vportconfig NULL pointer deref in remove Attempting to remove the driver will cause a crash in cases where the vport failed to initialize. Following trace is from an instance where the driver failed during an...

CVE-2025-68213 idpf: fix possible vport_config NULL pointer deref in remove

In the Linux kernel, the following vulnerability has been resolved: idpf: fix possible vportconfig NULL pointer deref in remove Attempting to remove the driver will cause a crash in cases where the vport failed to initialize. Following trace is from an instance where the driver failed during an...

CVE-2025-68181 drm/radeon: Remove calls to drm_put_dev()

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drmputdev Since the allocation of the drivers main structure was changed to devmdrmdevalloc drmputdev'ing to trigger it to be free'd should be done by devres. However, drmputdev is still in the probe...

CVE-2025-68172 crypto: aspeed - fix double free caused by devm

In the Linux kernel, the following vulnerability has been resolved: crypto: aspeed - fix double free caused by devm The clock obtained via devmclkgetenabled is automatically managed by devres and will be disabled and freed on driver detach. Manually calling clkdisableunprepare in error path and...

Malicious Package

Overview elf-stats-sugarplum-snowman-116 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious Package

Overview elf-stats-aurora-sleigh-694 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview elf-stats-holly-stocking-294 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in tailwind-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a9b7a9c02e83e0b4145dc9caaa9d04b407a199ae5d54b9f544f91397980966 The package tailwind-variables was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview tailwind-variables is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tailwind-stylecss is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in bigmathlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e535ed570f999285684c4f2a79ce262d460a98329790e34f433542070b9298 The package bigmathlib was found to contain malicious code. Source: ghsa-malware d73c91abd6a323d119e598928fc613100786424177806e36bb5ebd15f666de3e Any...

MAL-2025-192592 Malicious code in nad-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34249dc2bb9d97e2f560efbcef33d2f0f0de8cb15f9c66a984697700d6b92d43 The package nad-home was found to contain malicious code. Source: ghsa-malware 5d84934ad23672579c5ab6e2f431b6f1b99a7a8f0e872a628503037c6298f8d4 Any...

Malicious Package

Overview prod-natwest is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview starling-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-192594 Malicious code in prod-natwest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd39817ff9b18b049493c5014a7a0d4f69bd3cf2f4f2a2aebff64453e6ca7519 The package prod-natwest was found to contain malicious code. Source: ghsa-malware efa89a8af6324d2f6726e938c72b64a0b9a1ffbe7788455e95c7ff05752aba50 A...

Malicious Package

Overview elf-stats-aurora-cocoa-911 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in elf-stats-fuzzy-wreath-278 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de72f83ee4c58e98151bb08bdad43674b0ee28f24618856adaf402b3e2ddbcd9 The package elf-stats-fuzzy-wreath-278 was found to contain malicious code. Source: ghsa-malware...