Malicious code in avminh-afs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018d15fbf9a482a2e882124e01c25af3e57fbe5dce6995b5dfa0c2a919893e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153449 Malicious code in avminh-afs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018d15fbf9a482a2e882124e01c25af3e57fbe5dce6995b5dfa0c2a919893e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990522 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't accou...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988788)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988788 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't accou...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989612)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989612 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't accou...

Linux Distros Unpatched Vulnerability : CVE-2025-40010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix potential null pointer dereference in afsputserver afsputserver accessed server-debugid before the NULL check, which could lead to a null pointer...

CVE-2025-40010

In the Linux kernel, the following vulnerability has been resolved: afs: Fix potential null pointer dereference in afsputserver afsputserver accessed server-debugid before the NULL check, which could lead to a null pointer dereference. Move the debugid assignment, ensuring we never dereference a...

CVE-2025-40010 afs: Fix potential null pointer dereference in afs_put_server

In the Linux kernel, the following vulnerability has been resolved: afs: Fix potential null pointer dereference in afsputserver afsputserver accessed server-debugid before the NULL check, which could lead to a null pointer dereference. Move the debugid assignment, ensuring we never dereference a...

CVE-2025-40010

Technical details for CVE-2025-40010 are not publicly available in the provided documents. Monitor for updates from vendors/security advisories.

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a null pointer not being properly checked in the afsputserver function, which could lead to a null pointer...

EUVD-2009-2557

Malware in sbrugna...

EUVD-2000-1159

Malware in sbrugna...

EUVD-2007-1501

Malware in sbrugna...

EUVD-2009-1249

Malware in sbrugna...

EUVD-2002-0570

Malware in sbrugna...

EUVD-2007-0453

Malware in sbrugna...

EUVD-2025-28323

Malicious code in bioql PyPI...

EUVD-2022-40035

Malicious code in bioql PyPI...

USN-7595-4 linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...