SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP7) (SUSE-SU-2025:4056-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4056-1 advisory. This update for the Linux Kernel 6.4.0-15070051 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a nu...

CVE-2025-40197 media: mc: Clear minor number before put device

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

kernel: Bluetooth: Fix potential use-after-free when clear keys

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa26b5 "Bluetooth: Fix use-after-free in hciremoveltk/hciremoveirk". We can not access k after kfreercu call...

kernel: ipv6: mcast: Delay put pmc->idev in mld_del_delrec()

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc-idev in mlddeldelrec pmc-idev is still used in ip6mcclearsrc, so as mldcleardelrec does, the reference should be put after ip6mcclearsrc return...

UBUNTU-CVE-2025-40137

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate first page in error path of f2fstruncate syzbot reports a bug as below: loop0: detected capacity change from 0 to 40427 F2FS-fs loop0: Wrong SSA boundary, start3584 end4096 blocks3072 F2FS-fs loop0: Can't fi...

CVE-2025-40137 f2fs: fix to truncate first page in error path of f2fs_truncate()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate first page in error path of f2fstruncate syzbot reports a bug as below: loop0: detected capacity change from 0 to 40427 F2FS-fs loop0: Wrong SSA boundary, start3584 end4096 blocks3072 F2FS-fs loop0: Can't fi...

kernel: ipv6: mcast: Delay put pmc->idev in mld_del_delrec()

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc-idev in mlddeldelrec pmc-idev is still used in ip6mcclearsrc, so as mldcleardelrec does, the reference should be put after ip6mcclearsrc return...

kernel: Bluetooth: Fix potential use-after-free when clear keys

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa26b5 "Bluetooth: Fix use-after-free in hciremoveltk/hciremoveirk". We can not access k after kfreercu call...

kernel: Bluetooth: Fix potential use-after-free when clear keys

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa26b5 "Bluetooth: Fix use-after-free in hciremoveltk/hciremoveirk". We can not access k after kfreercu call...

EulerOS 2.0 SP12 : curl (EulerOS-SA-2025-2320)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname,...

RHEL 9 : kernel (RHSA-2025:21051)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21051 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: eventpoll: Fix semi-unbounded...

EUVD-2025-92727

Malicious code in clearmagpiez3n npm...

EUVD-2025-64974

Malicious code in cleartarantulaz3n npm...

EUVD-2025-86723

Malicious code in cleardormousez3n npm...

EUVD-2025-55431

Malicious code in clear-amethyst-kite npm...

MAL-2025-67220 Malicious code in clear-green-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf5ac1f479ec6369ba12d164d0c36090d4ab72eccafa29ac034a219a91d6840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55429

Malicious code in clear-green-catshark npm...

EUVD-2025-55428

Malicious code in clear-turquoise-partridge npm...

EUVD-2025-55430

Malicious code in clear-crimson-leech npm...

Intel NPU Driver for Windows 安全漏洞

Intel NPU Driver for Windows is a neural processing unit driver from Intel Corporation USA. A security vulnerability exists in Intel NPU Driver for Windows prior to version 32.0.100.4023, which stems from failure to clear sensitive information before resource release, which could lead to...