MAL-2025-14768 Malicious code in arc-branch-to-cmsg (npm)

The package arc-branch-to-cmsg was found to contain malicious code...

The vulnerability of the ip_cmsg_recv() function in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ipcmsgrecv function in the Linux operating system is related to the disclosure of information due to discrepancies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2025-11010

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference issue has been resolved in the Linux kernel. The issue was related to the nfp app ctrl msg alloc function, where a check for its return value was added in nf...

Malicious code in branch-to-cmsg (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1838 Malicious code in branch-to-cmsg (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-52701

In the Linux kernel, the following vulnerability has been resolved: net: use a bounce buffer for copying skb-mark syzbot found arm64 builds would crash in sockrecvmark when CONFIGHARDENEDUSERCOPY=y x86 and powerpc are not detecting the issue because they define useraccessbegin. This will be handl...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.323.8.el7 - vhost-scsi: Fix alignment handling with windows Mike Christie Orabug: 35769318 - Revert 'vhost/scsi: support non zerocopy iovecs' Rajan Shanmugavelu Orabug: 35769318 5.4.17-2136.323.7.el7 - x86: change default to specstorebypassdisable=prctl spectrev2user=prctl Andrea...

Malicious Package

Overview branch-to-cmsg is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

SUSE CVE-2017-6347

The ipcmsgrecvchecksum function in net/ipv4/ipsockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service buffer over-read or possibly have unspecified other impact via crafted system calls, as demonstrated b...

PT-2024-11256 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak has been resolved in the Linux kernel, specifically in the rds recvmsg function. The issue was caused by an unputted refcount in case of error. When rds cmsg recv fails,...

kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service

In the Linux kernel through 4.14.13, the rdscmsgatomic function in 'net/rds/rdma.c' mishandles cases where page pinning fails or an invalid address is supplied by a user. This can lead to a NULL pointer dereference in rdsatomicfreeop and thus to a system panic...

DEBIAN-CVE-2018-5333

In the Linux kernel through 4.14.13, the rdscmsgatomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rdsatomicfreeop NULL pointer dereference...

PT-2018-16901

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.14 Description The issue arises from the mishandling of page pinning failures or invalid address supplies by the rds cmsg atomic function in net/rds/rdma.c, leading to a NULL pointer dereference in rds atomi...

DEBIAN-CVE-2017-6347

The ipcmsgrecvchecksum function in net/ipv4/ipsockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service buffer over-read or possibly have unspecified other impact via crafted system calls, as demonstrated b...

PT-2017-3518 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.10.1 Description: The issue is related to the ip cmsg recv checksum function in the Linux kernel, which has incorrect expectations about skb data layout. This can be exploited by local users to cause a denial ...

DEBIAN-CVE-2016-4485

The llccmsgrcv function in net/llc/afllc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory by reading a message...

PT-2016-5975

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.5 Description The issue is related to the llc cmsg rcv function in the Linux kernel, which fails to initialize a certain data structure. This allows attackers to obtain sensitive information from kernel stack...

Privilege escalation

FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via a 1 SCTPSNDRCV, 2 SCTPEXTRCV, or 3 SCTPRCVINFO SCTP cmsg or a 4 SCTPPEERADDRCHANGE, 5...

PT-2014-5632

Name of the Vulnerable Software and Affected Versions FreeBSD versions 8.4 before p14 FreeBSD versions 9.1 before p17 FreeBSD versions 9.2 before p10 FreeBSD versions 10.0 before p7 Description The issue allows local users to obtain sensitive information from kernel memory. This can be achieved v...

PT-2011-1468

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.35 Description The issue is caused by an integer overflow in the rds cmsg rdma args function, allowing local users to cause a denial of service, potentially leading to a crash, and possibly triggering memory corruption...