Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in ‘usbgetbosdescriptor’ The BOS descriptor defines a root descriptor and serves as the base descriptor for accessing a family of related descriptors. The function usbgetbosdescriptor encounters a...

Malicious code in bos-decoration-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5985779c5099333bec5b084b209c36dea0dd9fa47ef2c2d7c3630c33daaa5 The package bos-decoration-elements was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2296 Malicious code in bos-decoration-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5985779c5099333bec5b084b209c36dea0dd9fa47ef2c2d7c3630c33daaa5 The package bos-decoration-elements was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-68730

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix page fault in ivpubounbindallbosfromcontext Don't add BO to the vdev-bolist in ivpugemcreateobject. When failure happens inside drmgemshmemcreate, the BO is not fully created and ivpugembofree callback will not be...

pkcs11-helper -- deserialize buffer overflow

Alon Bar-Lev reports: util: fix deserialize buffer overflow. thanks to Aarnav Bos...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989309)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989309 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989845)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989845 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root...

EUVD-2019-3158

Malware in sbrugna...

EUVD-2025-28244

Malicious code in bioql PyPI...

Malicious code in bos-fontmin (npm)

The package bos-fontmin was found to contain malicious code...

MAL-2025-15996 Malicious code in bos-fontmin (npm)

The package bos-fontmin was found to contain malicious code...

kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

kernel: usb: config: fix iteration issue in 'usb_get_bos_descriptor()'

In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usbgetbosdescriptor' encounters an iterati...

The vulnerability of the `usb_get_bos_descriptor()` function in the drivers/usb/core/config.c file of the Linux kernel allows a hacker to gain access to confidential data.

The vulnerability of the usbgetbosdescriptor function in the drivers/usb/core/config.c file of the Linux kernel is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to access confidential data...

CVE-2025-48735

A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2220219 before 21.45.8.2.3230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body...

PT-2025-22820 · Bos Ipcs · Bos Ipcs

Name of the Vulnerable Software and Affected Versions: BOS IPCs versions 21.45.8.2.2 220219 through 21.45.8.2.2 220219 Description: A SQL Injection issue in the request body processing allows remote attackers to obtain sensitive information from the database via crafted input in the request body...

BOS IPCs SQL注入漏洞

BOS IPCs is a family of sensors from BOS. A SQL injection vulnerability exists in versions prior to BOS IPCs 21.45.8.2.3230220, which stems from improper handling of the request body and could lead to SQL injection...

CVE-2025-48735

A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2220219 before 21.45.8.2.3230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body...

CVE-2025-48735

CVE-2025-48735 concerns BOS IPCs where firmware before 21.45.8.2.3_230220 is vulnerable to a SQL injection in the request body processing. The affected component is the BOS IPCs firmware stack (versions from 21.45.8.2.2_220219 up to, but not including, 21.45.8.2.3_230220). The root cause is impro...

CVE-2025-48735

A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2220219 before 21.45.8.2.3230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body...