SUSE-SU-2025:4140-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38008: mm/pagealloc: fix race condition in unaccepted memory handling bsc1244939. - CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues The following security issues were fixed: CVE-2025-38008: mm/pagealloc: fix race condition in unaccepted memory handling bsc1244939. CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister...

SUSE-SU-2025:21056-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38008: mm/pagealloc: fix race condition in unaccepted memory handling bsc1244939. - CVE-2025-38539: trace/fgraph: Fix the warning caused by missi...

Malicious code in mutdaufs-marimasa-dead (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9cb960edbb536d3c88e22e232070ae677866b0ca8e5d6c7a0aee87bc1f587e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117455

Malicious code in dead-beige-heron npm...

EUVD-2025-100136

Malicious code in deadbeetlez3n npm...

EUVD-2025-64632

Malicious code in deadzebraz3n npm...

MAL-2025-93920 Malicious code in dead_firefly_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e585716d875a99299bf0ba8d102490c38f0b9532480d3b2772b65f984fbbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86644

Malicious code in deadfireflyz3n npm...

Malicious code in dead_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094f3910ee1bf0dca20aaf5c20e47d862ca0d1519c3875ae537bc3dba5d0cf9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dead-moccasin-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cc73dbcd3f79c9380b2faf154b4410c0d0df7cfc0843f9ad45b83e90a330c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55021

Malicious code in dead-moccasin-shark npm...

MAL-2025-67628 Malicious code in dead-moccasin-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cc73dbcd3f79c9380b2faf154b4410c0d0df7cfc0843f9ad45b83e90a330c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55022

Malicious code in dead-aquamarine-pony npm...

EUVD-2025-55020

Malicious code in dead-salmon-damselfly npm...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988959)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988959 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix page reclaim for dead peer hairpin When adding a hairpin flow, a firmware-side sen...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989322 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Detect IP == ksym.end as part of BPF program Now that bpfthrow kfunc is the first such call...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988838)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988838 advisory. In the Linux kernel, the following vulnerability has been resolved: udp: fix race between close and udpabort Kaustubh reported and diagnosed a panic in udpliblookup...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989297 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Detect IP == ksym.end as part of BPF program Now that bpfthrow kfunc is the first such call...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fixed invalid task state transitions during class switching. When enabling the schedext scheduler, it is possible to trigger invalid task state transitions, resulting in warnings like the following which can be easily...