MAL-2025-26622 Malicious code in moltin-coalesce-generic (npm)

The package moltin-coalesce-generic was found to contain malicious code...

MAL-2025-17237 Malicious code in coalesce-magento (npm)

The package coalesce-magento was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2020-12771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.6.11. btreegccoalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails...

Linux Distros Unpatched Vulnerability : CVE-2021-47556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ethtool: ioctl: fix potential NULL deref in ethtoolsetcoalesce ethtoolsetcoalesce now uses...

The vulnerability of the ethtool_set_coalesce() function in the net/ethtool/ioctl.c module of the Linux kernel’s networking functions allows a hacker to cause a service failure.

The vulnerability of the ethtoolsetcoalesce function in the net/ethtool/ioctl.c module of the Linux kernel’s networking functions is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-29012

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to memory access within the ath12k driver. Specifically, in the ath12k dp rx msdu coalesce function, a use-after-free error can occur. This...

CVE-2025-21939

CVE-2025-21939 affects the Linux kernel DRM: XEHmm code path. The root cause is dereference of struct page pointers obtained from hmm_range_fault() without holding the notifier lock (and with an invalid/unstable seqno), risking access to pages not owned by the kernel during sg-table construction....

The vulnerability of the `tcp_can_coalesce_send_queue_head()` function in the `net/ipv4/tcp_output.c` module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the tcpcancoalescesendqueuehead function in the net/ipv4/tcpoutput.c module of the Linux kernel is associated with code errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

DEBIAN-CVE-2022-49142

In the Linux kernel, the following vulnerability has been resolved: net: preserve skbendoffset in skbunclonekeeptruesize syzbot found another way to trigger the infamous WARNONONCEdelta truesize value, we also need to make sure TCP wont fill new tailroom that pskbexpandhead was able to get from a...

DEBIAN-CVE-2022-49093

In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for pagepool fragment recycling Fix a use-after-free when using pagepool with page fragments. We encountered this problem during normal RX in the hns3 driver: 1 Initially we have three descriptors in the RX...

UBUNTU-CVE-2022-49142

In the Linux kernel, the following vulnerability has been resolved: net: preserve skbendoffset in skbunclonekeeptruesize syzbot found another way to trigger the infamous WARNONONCEdelta truesize value, we also need to make sure TCP wont fill new tailroom that pskbexpandhead was able to get from a...

GHSA-3XG3-CGVQ-2XWR Twig security issue where escaping was missing when using null coalesce operator

When using the ?? operator, output escaping was missing for the expression on the left side of the operator...

Twig security issue where escaping was missing when using null coalesce operator

When using the ?? operator, output escaping was missing for the expression on the left side of the operator...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview twig/twig is a flexible, fast, and secure template language for PHP. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' due to improper handling of the null coalesce operator ??. This is...

CVE-2025-24374 Twig fixes a security issue where escaping was missing when using null coalesce operator (??)

Twig is a template language for PHP. When using the ?? operator, output escaping was missing for the expression on the left side of the operator. This vulnerability is fixed in 3.19.0...

Missing output escaping for the null coalesce operator

More info at https://symfony.com/blog/twig-cve-2025-24374-missing-output-escaping-for-the-null-coalesce-operator...

SUSE CVE-2024-46770

In the Linux kernel, the following vulnerability has been resolved: ice: Add netifdeviceattach/detach into PF reset flow Ethtool callbacks can be executed while reset is in progress and try to access deleted resources, e.g. getting coalesce settings can result in a NULL pointer dereference seen...

CVE-2024-46770

In the Linux kernel, the following vulnerability has been resolved: ice: Add netifdeviceattach/detach into PF reset flow Ethtool callbacks can be executed while reset is in progress and try to access deleted resources, e.g. getting coalesce settings can result in a NULL pointer dereference seen...

DEBIAN-CVE-2024-46770

In the Linux kernel, the following vulnerability has been resolved: ice: Add netifdeviceattach/detach into PF reset flow Ethtool callbacks can be executed while reset is in progress and try to access deleted resources, e.g. getting coalesce settings can result in a NULL pointer dereference seen...

UBUNTU-CVE-2024-46770

In the Linux kernel, the following vulnerability has been resolved: ice: Add netifdeviceattach/detach into PF reset flow Ethtool callbacks can be executed while reset is in progress and try to access deleted resources, e.g. getting coalesce settings can result in a NULL pointer dereference seen...