kernel: RDMA/rxe: Fix incomplete state save in rxe_requester

An incorrect state restoration flaw was found in the Linux kernel's RDMA rxe soft-RoCE driver in the requester packet transmission logic. A local user with access to RDMA devices can trigger this issue when network layer packet drops occur during RDMA send operations, causing the work queue eleme...

CVE-2025-68770

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix XDPTX path For XDPTX action in bnxtrxxdp, clearing of the event flags is not correct. bnxtpollwork - bnxtrxpkt - bnxtrxxdp may be looping within NAPI and some event flags may be set in earlier iterations. In particula...

GHSA-5RFX-CP42-P624 Quarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write

A vulnerability exists in the HTTP layer of Quarkus REST related to response handling. When a response is being written, the framework waits for previously written response chunks to be fully transmitted before proceeding. If the client connection is dropped during this waiting period, the...

CVE-2025-66560

The CVE-2025-66560 entry describes a Quarkus REST HTTP-layer vulnerability where, during response writing, the framework waits for prior chunks to finish transmission. If the client closes the connection mid-wait, the worker thread is not released and becomes blocked, potentially exhausting worke...

kernel: RDMA/rxe: Fix incomplete state save in rxe_requester

An incorrect state restoration flaw was found in the Linux kernel's RDMA rxe soft-RoCE driver in the requester packet transmission logic. A local user with access to RDMA devices can trigger this issue when network layer packet drops occur during RDMA send operations, causing the work queue eleme...

CVE-2025-64330

CVE-2025-64330 concerns Suricata, a network IDS/IPS engine. Prior to versions 7.0.13 and 8.0.2, a single-byte read heap overflow during verdict logging in eve.alert/eve.drop can cause crashes when the per-packet alert queue is saturated and a pass rule follows. The issue has been patched in 7.0.1...

Malicious code in sonic-oig-mopigaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33b840d77d4e89e100dae8972ade33fcfffee39000c4036991a733ad560fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-mipved (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea99dec6a0671ddd751580f8b8dcb15a9cfc2cb43015a26ee1ea546af1efc73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163481 Malicious code in nokire-sekiya87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff33e71f8da81d7d249e54d9d9728d370e56ca8db117db565b5fb7592fc34d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150978 Malicious code in @miptaa02/tia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65eebe337cb428e149392633fb48c56118a4facdefc04c7cb3c0fcf132052c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-atlas-bunyan-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342ccff9c90a37b95f109a686f983a092bbaa10d056793b078819132e688deab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-quito-barnard-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0999778b0d4a307745cd342194d1abc44234bd567279fc3aaf00c47c785312c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chilly_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51849bab86b079dfbf084e3031b651e040f0856fda4d441798cc7d7d3fc17c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130068 Malicious code in sari-wajit55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f4b4caa3f597b86f198fd3b4e6d989d1cf796ad3d6e3da812934f971d6b6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129071 Malicious code in official_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98620a18208f2d69a16e980d6eb6bf63037aad604a840c1a1c5d862f1878fd60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-sambel40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5deb27c6f13b88feeb60ef24eeb2009646273b34fa213fabfee40cfa7988c5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_kiwi-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9670c133109df77cd940a0270abcf16e706cd7e4897c37a929047fe0bf0e255e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f86d0986c005f35c2ff44298e2e1573528ebd20472ff4c50d4bf11c210bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111575 Malicious code in zul-bakwan19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba77251d474fa7ce64180d1345a3f304e84f9fc701e53674971cc5196b219d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110500 Malicious code in vida-rendang97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8918f47f37b3b19d60d9d26627638b91fcf39e5c3d7445f72c181c1e916a9e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...