PT-2022-30909

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18 Description The issue is related to a possible overflow on the first minor variable in the nbd dev add function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30815

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A refcount leak was discovered in the cleanup dev function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.4, upda...

PT-2022-31109

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a warning in the dev wake function within mhi pm disable transition. The actual impact and potential for attack have not been proven. Recommendations For Linux Kernel...

PT-2022-31310

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.14 Description The issue is related to a potential deadlock in the Linux Kernel, specifically with the pci dev lock function in conjunction with sriov numvfs store. The actual impact and attack plausibility...

PT-2022-31058

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a potential use-after-free UAF vulnerability in the NFC component. The problem arises from not properly nulling out the dev-rfkill, which could lead to security issues...

PT-2022-31582

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15.33 through 5.15.45 Description A potential security issue exists due to a NULL pointer dereference when printing dev name. The actual impact and attack plausibility have not yet been proven. This issue was introduced...

PT-2022-32060

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue concerns error handling in the mt8173 max98090 dev probe function. It was introduced in version v4.2 and fixed in version v5.4.198. The actual impact and attack plausibility have no...

PT-2022-31667

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to accessing input dev under a mutex in the ALSA jack component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31615

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a potential deadlock in the Linux Kernel, specifically with the pci dev lock function and sriov numvfs store. The actual impact and attack plausibility have not yet be...

PT-2022-31069

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns error handling in the mt8173 max98090 dev probe function. It was introduced in version v4.2 and fixed in version v5.18.3. The actual impact and attack plausibility have not...

PT-2022-31831

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a potential deadlock in the Linux Kernel, specifically with the pci dev lock function and sriov numvfs store. The actual impact and attack plausibility have not yet...

State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks

A China-based advanced persistent threat APT group is possibly deploying short-lived ransomware families as a decoy to cover up the true operational and tactical objectives behind its campaigns. The activity cluster, attributed to a hacking group dubbed Bronze Starlight by Secureworks, involves t...

Malicious Package

Overview dev-wallet is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview ui-extensions-dev-console-app is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Malicious Package

Overview identity-dev-docs is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

PT-2025-26075

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock issue has been identified in the Linux kernel, specifically in the driver attach function. This issue arises when asynchronous probing is allowed, and due to...

MAL-2022-2474 Malicious code in dinesh-dev-nagajikkktest11223qa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 264ebd2de392e7bd4b34274a1240574d0e278d607f37c1b9a0d1bc6baf9456df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fxa-dev-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98ed0ac9d7db600b89a3182d2eb21eaa58280411b41ac01a569dab47f4963351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3256 Malicious code in fxa-dev-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98ed0ac9d7db600b89a3182d2eb21eaa58280411b41ac01a569dab47f4963351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dn-dev-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e433e9c51ba0d7390b2014d0f7bfc5b91ac15b47e043e4bda69962f8412a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...