MAL-2025-190767 Malicious code in create-glee-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0932871cd18a6f6a6b4dc800d53bb26dee4aa4d1ca50380eb529d8de49e31 The package create-glee-app was found to contain malicious code. Source: ghsa-malware e24413ea376e0b85679ffebea5b81417a76a0134b6cde174e7a183437326193...

MAL-2025-190757 Malicious code in @seung-ju/react-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adf0b1f6ebc35246707044936c68dfe237eb92c6e65e24e87383fcfb2dbe55f The package @seung-ju/react-hooks was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190787 Malicious code in vite-plugin-httpfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d63741ea6b6aadbc224aabf56e98c5eb7b664d7554dbb502869a97ffffb2f46 The package vite-plugin-httpfile was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190679 Malicious code in @trigo/atrix-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8faf4ce8a59f1dddea70c86855597a55d78518cc7f1c98ae103c8be6559acf5c The package @trigo/atrix-mongoose was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190696 Malicious code in ethereum-ens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874848c97832c07d7093bf8c59c73549a0f9b8c2ecffeab4d33a5c3fbcfb6a4a The package ethereum-ens was found to contain malicious code. Source: ghsa-malware 08b4862efdbd7fabbe626b338824bea3a86cdb7a190c176ab6ddc665f9ecf080 A...

MAL-2025-190691 Malicious code in @zapier/secret-scrubber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c109e973086267fe5b99a110c559267a26254a0bb87dcffbaf3fb69ea4bbca75 The package @zapier/secret-scrubber was found to contain malicious code. Source: ghsa-malware...

Malicious code in @quick-start-soft/quick-markdown-print (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e82ae5f39d0c568ce2ebb23ff053c97eba1c0bb306b946c3fefc4c0680b526 The package @quick-start-soft/quick-markdown-print was found to contain malicious code. Source: ghsa-malware...

mptcp: move subflow cleanup in mptcp_destroy_common()

...

AlmaLinux 8 : kernel (ALSA-2025:19931)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:19931 advisory. kernel: x86/vmscape: Add conditional IBPB mitigation CVE-2025-40300 kernel: mm: fix zswap writeback race condition CVE-2023-53178 kernel: fs: fix UAF/GPF...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41063)

Bluetooth: hcicore: deadlock at destroyworkqueue. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504797; scriptversion"1.3";...

The vulnerability of the `destroy_cq_user()` function in the drivers/infiniband/hw/mlx5/cq.c driver of the Linux operating system’s InfiniBand kernel module allows a malicious actor to cause a service failure.

The vulnerability of the destroycquser function in the drivers/infiniband/hw/mlx5/cq.c driver of the Linux operating system’s InfiniBand support module is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2025-40119

In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential null deref in ext4mbinit In ext4mbinit, ext4mbavgfragmentsizedestroy may be called when sbi-smbavgfragmentsize remains uninitialized e.g., if groupinfo slab cache allocation fails. Since...

RockyLinux 8 : kernel-rt (RLSA-2025:19932)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:19932 advisory. kernel: x86/vmscape: Add conditional IBPB mitigation CVE-2025-40300 kernel: mm: fix zswap writeback race condition CVE-2023-53178 kernel: fs: fix UAF/GP...

Linux Distros Unpatched Vulnerability : CVE-2025-40119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential null deref in ext4mbinit In ext4mbinit, ext4mbavgfragmentsizedestroy may...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

UBUNTU-CVE-2025-40119

In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential null deref in ext4mbinit In ext4mbinit, ext4mbavgfragmentsizedestroy may be called when sbi-smbavgfragmentsize remains uninitialized e.g., if groupinfo slab cache allocation fails. Since...

CVE-2025-40119 ext4: fix potential null deref in ext4_mb_init()

In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential null deref in ext4mbinit In ext4mbinit, ext4mbavgfragmentsizedestroy may be called when sbi-smbavgfragmentsize remains uninitialized e.g., if groupinfo slab cache allocation fails. Since...

CVE-2025-40119

CVE-2025-40119 affects the Linux kernel ext4 subsystem. The root cause is a potential null dereference in ext4_mb_init() where ext4_mb_avg_fragment_size_destroy() could be invoked with sbi->s_mb_avg_fragment_size uninitialized (e.g., groupinfo slab cache allocation failure), due to missing nul...

CVE-2025-40119

In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential null deref in ext4mbinit In ext4mbinit, ext4mbavgfragmentsizedestroy may be called when sbi-smbavgfragmentsize remains uninitialized e.g., if groupinfo slab cache allocation fails. Since...

CVE-2025-40119 ext4: fix potential null deref in ext4_mb_init()

In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential null deref in ext4mbinit In ext4mbinit, ext4mbavgfragmentsizedestroy may be called when sbi-smbavgfragmentsize remains uninitialized e.g., if groupinfo slab cache allocation fails. Since...