2105 matches found
RHEL 9 : kernel (RHSA-2025:23241)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23241 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cloneprivatemnt: make sure th...
SUSE CVE-2025-40327
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usage cpu-clock usage by the async-profiler tool can trigger a system hang, which got bisected back to the following commit by Octavia Togami: 18dbcbfabfff "perf: Fix the POLLHUP...
UBUNTU-CVE-2025-40327
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usage cpu-clock usage by the async-profiler tool can trigger a system hang, which got bisected back to the following commit by Octavia Togami: 18dbcbfabfff "perf: Fix the POLLHUP...
CVE-2025-40327 perf/core: Fix system hang caused by cpu-clock usage
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usage cpu-clock usage by the async-profiler tool can trigger a system hang, which got bisected back to the following commit by Octavia Togami: 18dbcbfabfff "perf: Fix the POLLHUP...
EUVD-2022-55706
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference state management for synchronous callbacks Currently, verifier verifies callback functions sync and async as if they will be executed once, i.e. it explores execution state as if the function was being called...
CVE-2022-50650
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference state management for synchronous callbacks Currently, verifier verifies callback functions sync and async as if they will be executed once, i.e. it explores execution state as if the function was being called...
Linux Distros Unpatched Vulnerability : CVE-2025-40327
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Fix system hang caused by cpu-clock usage cpu-clock usage by the async-profiler tool can trigger a system hang, which got bisected back to the...
Node.js: Uncatchable "Maximum call stack size exceeded" error on Node.js via async_hooks leads to process crashes bypassing error handlers
A vulnerability was identified in Node.js error handling where "Maximum call stack size exceeded" errors became uncatchable when asynchooks.createHook was enabled. Instead of reaching process.on'uncaughtException', the process terminated, making the crash unrecoverable...
kernel: tls: separate no-async decryption request handling from async
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We...
PT-2025-48969
Name of the Vulnerable Software and Affected Versions Envoy versions 1.33.12 through 1.36.2 Description Envoy, a high-performance edge/middle/service proxy, experiences crashes when JWT authentication is configured with remote JWKS fetching enabled, allow missing or failed is set to true, multipl...
Race Condition
Overview lifx-async is an A modern, type-safe, async Python library for controlling LIFX lights Affected versions of this package are vulnerable to Race Condition due to improper synchronization in concurrent request handling within the network module. The package fails to implement adequate...
Malicious code in @gr-exports/async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8832eae90b7d3651b42c92dfd4d5c51fa5766d1e571fab494f073a6389b3aa1 The package @gr-exports/async was found to contain malicious code...
MAL-2025-191560 Malicious code in @gr-exports/async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8832eae90b7d3651b42c92dfd4d5c51fa5766d1e571fab494f073a6389b3aa1 The package @gr-exports/async was found to contain malicious code...
Malicious code in @gr-common/async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1bf5b6b7e2fd480a24ad41a4ab335d9b6abbc762aec4bcc7a15e5529a0e41c The package @gr-common/async was found to contain malicious code...
MAL-2025-191559 Malicious code in @gr-common/async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1bf5b6b7e2fd480a24ad41a4ab335d9b6abbc762aec4bcc7a15e5529a0e41c The package @gr-common/async was found to contain malicious code...
Malicious Package
Overview chai-async-flow is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
CVE-2025-65503
Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...
Malicious code in zapier-async-storage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106802713a8738ac15728a0fdb19774a74ac3ae3aa76b501b8d4b08e8a7e5e The package zapier-async-storage was found to contain malicious code. Source: ghsa-malware...