122 matches found
CVE-2025-68343
CVE-2025-68343 in the Linux kernel affects the can: gs_usb driver (gs_usb_receive_bulk_callback). The vulnerability arises from not validating the actual_length before accessing the gs_host_frame header, risking dereference of an incomplete header. The fix uses struct_group to describe the header...
CVE-2025-68343
In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbreceivebulkcallback: check actuallength before accessing header The driver expects to receive a struct gshostframe in gsusbreceivebulkcallback. Use structgroup to describe the header of the struct gshostframe and...
CVE-2025-68343 can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header
In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbreceivebulkcallback: check actuallength before accessing header The driver expects to receive a struct gshostframe in gsusbreceivebulkcallback. Use structgroup to describe the header of the struct gshostframe and...
CVE-2025-68342 can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbreceivebulkcallback: check actuallength before accessing data The URB received in gsusbreceivebulkcallback contains a struct gshostframe. The length of the data after the header depends on the gshostframe hf::fla...
CVE-2025-68342 can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbreceivebulkcallback: check actuallength before accessing data The URB received in gsusbreceivebulkcallback contains a struct gshostframe. The length of the data after the header depends on the gshostframe hf::fla...
CVE-2025-68342
In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbreceivebulkcallback: check actuallength before accessing data The URB received in gsusbreceivebulkcallback contains a struct gshostframe. The length of the data after the header depends on the gshostframe hf::fla...
EUVD-2025-101825
Malicious code in actualiguanaz3n npm...
EUVD-2025-93363
Malicious code in actualpandaz3n npm...
EUVD-2025-75077
Malicious code in actualkoi-appteadev npm...
EUVD-2025-75076
Malicious code in actualswallow-strongdev npm...
EUVD-2025-77820
Malicious code in actualsolez3n npm...
Malicious code in actual_sole_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4830bf3edda3aabfbfaa46d2a992d04d6e53e954fc62f4521885248a4b54834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77819
Malicious code in actualtermitez3n npm...
EUVD-2025-65434
Malicious code in actualstoatz3n npm...
EUVD-2025-65436
Malicious code in actuallemurz3n npm...
EUVD-2025-87333
Malicious code in actualmastodonz3n npm...
EUVD-2025-56023
Malicious code in actual-turquoise-prawn npm...
EUVD-2025-56024
Malicious code in actual-blue-crow npm...