Linux Distros Unpatched Vulnerability : CVE-2025-40159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: Harden userspace-supplied xdpdesc validation Turned out certain clearly invalid values passed in xdpdesc from userspace can pass xp,unalignedvalidatedesc a...

MAL-2025-137385 Malicious code in tomi-serimuka28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf50ba0c6b51cd319edf309254b8ae0ab3d993e277ab7a84eacc0c6f27e94d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab01551278cbcf6ec1db58adf68c2525628cd5a4b7cf0274e39d977f84a0d471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-lontong42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572f6814f24bf575cc396ec77062eafe74518e919e484f2ffd5b4107099fb85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-lapis93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36161a3db434c074ea261d7a19cf61733dcfb933ffa9dd6b1f2792cd72207f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: inotify: Avoid reporting event with invalid wd

A race condition was found in the Linux kernel's inotify subsystem. When inotifyfreeingmark races with inotifyhandleinodeevent, the event handler may read imark-wd after it has been reset to -1. This causes an invalid watch descriptor value of -1 to be reported to userspace applications,...

MAL-2025-95204 Malicious code in leading_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ece27b27ec080e6834e1ee1a88b1e75cacfec3ec7d0138962faeffb03f0b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86443 Malicious code in hendra-tahutek83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac7fdede68d1499144ec48923cd331211447febb90dd124f0e7a0cd0cd38f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sego83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba24748840b55eedbc6bcbdbd6ed872e4ae32108688b5560995c3bdbbfa50fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71281 Malicious code in unfortunate-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2f295d39e2e2caf5747d61b6a9b95c88d1ef7c0d66bd1a173d25f4c314ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-klipo57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51861a077e383a7f7b52388a0106bb2bd4c8b1509928028ed3378bcf9316c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-51635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the pinctrl subsystem, specifically within the s32cc driver. The s32 pinctrl desc structure is allocated using devm kmalloc, but not all of its fiel...

MAL-2025-54383 Malicious code in putri-nasi68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af5dbf06db18e154551edaa1222d796c5dc878c8181ddcfe9c78e35351118fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990558 advisory. In the Linux kernel, the following vulnerability has been resolved: um: Fix out-of-bounds read in LDT setup syscallstubdata expects the datacount parameter to be the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989841 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989360 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix handling of dummy receive descriptors Fix memory leak caused by not handling dummy...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989262 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989762 advisory. In the Linux kernel, the following vulnerability has been resolved: net: lltemac: Make sure to free skb when it is completely used With the skb pointer piggy-backed ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989309)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989309 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989951 advisory. In the Linux kernel, the following vulnerability has been resolved: net: systemport: Add global locking for descriptor lifecycle The descriptor list is a shared...