CVE-2022-50162 wifi: libertas: Fix possible refcount leak in if_usb_probe()

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: Fix possible refcount leak in ifusbprobe usbgetdev will be called before lbsgetfirmwareasync which means that usbputdev need to be called when lbsgetfirmwareasync fails...

CVE-2022-50073 net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null

In the Linux kernel, the following vulnerability has been resolved: net: tap: NULL pointer derefence in devparseheaderprotocol when skb-dev is null Fixes a NULL pointer derefence bug triggered from tap driver. When tapgetuser calls virtionethdrtoskb the skb-dev is null in tap.c skb-dev is set aft...

CVE-2022-50073

CVE-2022-50073 affects the Linux kernel TAP path. Root cause: in dev_parse_header_protocol the code dereferences skb->dev which can be NULL when the tap driver calls virtio_net_hdr_to_skb, causing a NULL pointer dereference. The issue is triggered in tap_get_user/tap_sendmsg paths and can cras...

CVE-2022-50073: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: net: tap: NULL pointer derefence in devparseheaderprotocol when skb-dev is null Fixes a NULL pointer derefence bug triggered from tap driver. When tapgetuser calls virtionethdrtoskb the skb-dev is null in tap.c skb-dev is set aft...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrect use of devtracker in the ax25 driver...

PT-2025-25904 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential divide by zero error has been identified in the Linux kernel, specifically in the fb pm2fb function of the fbdev module. This issue arises when the do fb ioctl function in...

Malicious code in mafid-dev-fe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36b547ef1882f646ffc42cf752909cf2d8483815568ff161e37189b3d3ca5d47 Any computer that has this package installed or running should be considered...

MAL-2025-5037 Malicious code in mafid-dev-fe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36b547ef1882f646ffc42cf752909cf2d8483815568ff161e37189b3d3ca5d47 Any computer that has this package installed or running should be considered...

Malware in dev-api-client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: openvswitch: Use RCU protection in ovsvportcmdfillinfo. ovsvportcmdfillinfo can be called without RTNL or RCU. Use RCU protection and devnetrcu to avoid potential UAF Use-After-Free errors...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fixed a crash that occurred due to an error in gpiochipgetngpios. The gpiochipgetngpios function uses the chip macros to print messages. However, these macros rely on gpiodev being initialized and set up; this is not the...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev-driver from a valid pointer to NU...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: octeonep: Fixed the issue where the host would hang during device reboot. When the host loses heartbeat messages from the device, the driver calls the device-specific ndostop function, which frees the resources. If the driver is...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/sched: The use-of-free issue in tapriodevnotifier has been fixed. Since tapriodevnotifier is not protected by a critical section on the read side of an RCU, a race with advancesched can lead to a use-of-free issue. Adding...

Malicious code in client-vue3-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949b1148db60c58f37c8fec03067aa1974329c0f5719de4425b8840f213b5f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4976 Malicious code in client-vue3-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949b1148db60c58f37c8fec03067aa1974329c0f5719de4425b8840f213b5f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in zlib1g-dev

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in zlib1g-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6efdb438d569565922df7e3f3cd142e51dd3fb1e1fe0467a71399e26930faf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4913 Malicious code in zlib1g-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6efdb438d569565922df7e3f3cd142e51dd3fb1e1fe0467a71399e26930faf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4847 Malicious code in libxslt1-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01dca888124ebee488c3fdffe46760b8062c7b090ec88b917cf55144e2f46289 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...