2739 matches found
CVE-2025-40259
In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sgfinishremreq calls blkrqunmapuser. The latter function may sleep. Hence, call sgfinishremreq with interrupts enabled instead of disabled...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from calls to potentially sleepy functions in an atomic context that could lead to deadlocks...
CVE-2025-40259: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sgfinishremreq calls blkrqunmapuser. The latter function may sleep. Hence, call sgfinishremreq with interrupts enabled instead of disabled...
Automattic: XSS Vulnerability on Pressable/Atomic Hosting Platform via unescaped admin notices leads to code execution
A cross-site scripting XSS vulnerability was discovered in the Pressable/Atomic Hosting Platform's admin notices feature. Unescaped text output in the atomic-platform.php file allowed arbitrary JavaScript code execution when an administrator updated or set the atomicsingleoptionlimiternotices...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47740)
Inf2fs: Require FMODEWRITE for atomic write ioctls. The F2FS ioctls for starting and committing atomic writes check for inodeownerorcapable, but this does not give LSMs like SELinux or Landlock an opportunity to deny the write access - if the caller's FSUID matches the inode's UID,...
PT-2025-49089
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the SCSI subsystem, specifically in the sg module. The sg finish rem req function calls blk rq unmap user, which can potentially lead to sleeping...
Malicious code in atomic-teal-deer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b52c3fee7dc7f21ae8816350aa42ba884fe9f87afb9571ee1e133ac48b9df96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117512
Malicious code in atomic-teal-deer npm...
dm-bufio: don't schedule in atomic context
...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990784)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990784 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: xilinx: don't make a sleepable memory allocation from an atomic context The following...
Malicious code in atomic_dingo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91eb3acb0e18687d73c0cc3bd6237176c5edaf502c14a928d2fcc5fcb1617262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in atomic_minnow_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a8b1d8d5f1e4a1ae3b279d554886486e7c7eff77c7a0c3ceab75c1b6f80b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in atomic_galliform_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732482d04febc269c667f7eb28188dd2a4bae0b4e43c2217676b067cfe753458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-93147
Malicious code in atomicbugz3n npm...
MAL-2025-112737 Malicious code in atomic_bug_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b55f1e2d2d2fd63004aa8df0272e23b81563242a82484b67283a4bea6639ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in atomic_earwig_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4691a4dfae74afa30e48357a1229a39131fb32b6d992076deb1657a7f8f42dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77725
Malicious code in atomicearwigz3n npm...
Malicious code in atomic_lion_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3458abb55b27ba57530c5d2e15156d593ee6d4257ac547fb468a418336a346e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in atomic_mongoose_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797e62a483b2fda7bff2860d9bcfcab56c1db9569f61f7cd01c45fcddc366072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...