kernel: ALSA: usb-audio: ALSA USB Audio Out-of-Bounds Bug

A flaw was found in the Linux kernel ALSA USB audio driver. This vulnerability allows a denial of service via a crafted USB audio device...

kernel: ALSA: usb-audio: ALSA USB Audio Out-of-Bounds Bug

A flaw was found in the Linux kernel ALSA USB audio driver. This vulnerability allows a denial of service via a crafted USB audio device...

kernel: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmfgetassocies Fix a slab-out-of-bounds read that occurs in kmemdup called from brcmfgetassocies. The bug could occur when associnfo-reqlen, data from a URB provided by a USB device, i...

Malicious code in universal_cephalopod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919848118ff146effa4d4e5bb6982a16aa63366a8291542584062770a87eb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-94431

Malicious code in universalcephalopodz3n npm...

MAL-2025-123870 Malicious code in universal_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae7596e91adf6f60737ec3e8c92677791fdb4db8dad9cc95e59e1d18643b2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-88198

Malicious code in universalchinchillaz3n npm...

kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix NULL pointer dereference on certain command aborts If a command is queued to the final usable TRB of a ring segment, the enqueue pointer is advanced to the subsequent link TRB and no further. If the command is late...

kernel: usb: typec: ucsi: displayport: Fix NULL pointer access

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that the UCSI driver waits for all pending tasks in the ucsidisplayportwork workqueue to finish executing before proceeding with the partner removal...

kernel: usb: typec: ucsi: displayport: Fix NULL pointer access

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that the UCSI driver waits for all pending tasks in the ucsidisplayportwork workqueue to finish executing before proceeding with the partner removal...

kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix NULL pointer dereference on certain command aborts If a command is queued to the final usable TRB of a ring segment, the enqueue pointer is advanced to the subsequent link TRB and no further. If the command is late...

EUVD-2025-74125

Malicious code in universalgooseolive-89 npm...

EUVD-2025-74124

Malicious code in universalplanarianapricot-85 npm...

EUVD-2025-75345

Malicious code in universalraccoon-gooddev npm...

EUVD-2025-83813

Malicious code in universalelephantz3n npm...

Malicious code in universal_moth_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0279e38d43b41193c8d4e515d7f4ae50828e69fd137bf1d54fc3481f92d5c745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73136

Malicious code in universalhornetrequirement npm...

EUVD-2025-73134

Malicious code in universalotterz3n npm...

Malicious code in universal_hornet_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9147e996926f42d54cf863434d37d0f01705d850fa51a7175a1b47a323f5b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31d6f1942156b19e2690861533f499f7a2b84efd5852aef077da91a42b60a6b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...