421 matches found
CVE-2025-71067
The CVE-2025-71067 vulnerability affects the Linux kernel NTFS mounting path where sb->s_blocksize can remain zero when the block size of the block device exceeds PAGE_SIZE, causing ntfs_init_from_boot() to read the boot_block with an undefined/zero blocksize. The issue is triggered during mou...
PT-2026-2588
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to handling block sizes during the mounting of NTFS file systems. Specifically, when mounting, the superblock's block size sb-s blocksize is used...
SUSE CVE-2025-68742
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog-stats access when updateeffectiveprogs fails Syzkaller triggers an invalid memory access issue following fault injection in updateeffectiveprogs. The issue can be described as follows: cgroupbpfdetach...
EUVD-2025-205220
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog-stats access when updateeffectiveprogs fails Syzkaller triggers an invalid memory access issue following fault injection in updateeffectiveprogs. The issue can be described as follows: cgroupbpfdetach...
CVE-2025-68742
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog-stats access when updateeffectiveprogs fails Syzkaller triggers an invalid memory access issue following fault injection in updateeffectiveprogs. The issue can be described as follows: cgroupbpfdetach...
CVE-2025-68742 bpf: Fix invalid prog->stats access when update_effective_progs fails
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog-stats access when updateeffectiveprogs fails Syzkaller triggers an invalid memory access issue following fault injection in updateeffectiveprogs. The issue can be described as follows: cgroupbpfdetach...
CVE-2023-54027
In the Linux kernel, the following vulnerability has been resolved: iio: core: Prevent invalid memory access when there is no parent Commit 813665564b3d "iio: core: Convert to use firmware node handle instead of OF node" switched the kind of nodes to use for label retrieval in device registration...
CVE-2023-54027
In the Linux kernel, the following vulnerability has been resolved: iio: core: Prevent invalid memory access when there is no parent Commit 813665564b3d "iio: core: Convert to use firmware node handle instead of OF node" switched the kind of nodes to use for label retrieval in device registration...
UBUNTU-CVE-2023-54027
In the Linux kernel, the following vulnerability has been resolved: iio: core: Prevent invalid memory access when there is no parent Commit 813665564b3d "iio: core: Convert to use firmware node handle instead of OF node" switched the kind of nodes to use for label retrieval in device registration...
CVE-2023-54027
CVE-2023-54027 Linux kernel IIO core: a regression from converting label retrieval to firmware node handles could trigger NULL pointer dereference when a device has no parent (observed in stock IIO dummy driver during configfs entry creation). The fix (commit 813665564b3d) prevents invalid memory...
CVE-2023-54027 iio: core: Prevent invalid memory access when there is no parent
In the Linux kernel, the following vulnerability has been resolved: iio: core: Prevent invalid memory access when there is no parent Commit 813665564b3d "iio: core: Convert to use firmware node handle instead of OF node" switched the kind of nodes to use for label retrieval in device registration...
CVE-2023-54027 iio: core: Prevent invalid memory access when there is no parent
In the Linux kernel, the following vulnerability has been resolved: iio: core: Prevent invalid memory access when there is no parent Commit 813665564b3d "iio: core: Convert to use firmware node handle instead of OF node" switched the kind of nodes to use for label retrieval in device registration...
PT-2025-53008
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where an invalid memory access can occur following fault injection in the update effective progs function. This issue arises when fault injection causes...
EUVD-2025-204865
Malicious code in supplychaindummytest3 npm...
MAL-2025-192761 Malicious code in supply_chain_dummy_test_2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3f5fef388376bf388c291f40ce96d8431d31f38fb29b6f69b6543408d9ef2f The package supplychaindummytest2 was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192763 Malicious code in supply_chain_dummy_test_4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44714fb556ca073c6056617d8f13043c9fc07b19dd6b1c6599b62dc183c87a45 The package supplychaindummytest4 was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-204866
Malicious code in supplychaindummytest2 npm...
EUVD-2025-204864
Malicious code in supplychaindummytest4 npm...
Malicious Package
Overview supplychaindummytest1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...