Linux Distros Unpatched Vulnerability : CVE-2025-40190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already...

CVE-2025-40190

In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...

AZL-70091 CVE-2025-40190 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...

UBUNTU-CVE-2025-40190

In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...

CVE-2025-40190 ext4: guard against EA inode refcount underflow in xattr update

In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990896 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of newea in eabuffer syzbot reports that lzo1x1docompress is using...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990224)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990224 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: don't walk off the end of ealist Add a check before visiting the members of ea to make sure...

EUVD-2018-14274

Malware in sbrugna...

SUSE CVE-2023-53420

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix panic about slab-out-of-bounds caused by ntfslistxattr Here is a BUG report from syzbot: BUG: KASAN: slab-out-of-bounds in ntfslistea fs/ntfs3/xattr.c:191 inline BUG: KASAN: slab-out-of-bounds in ntfslistxattr+0x401/0x5...

CVE-2023-53420 ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix panic about slab-out-of-bounds caused by ntfslistxattr Here is a BUG report from syzbot: BUG: KASAN: slab-out-of-bounds in ntfslistea fs/ntfs3/xattr.c:191 inline BUG: KASAN: slab-out-of-bounds in ntfslistxattr+0x401/0x5...

CVE-2023-53420

CVE-2023-53420 affects the Linux kernel NTFS code path. The issue arises in ntfs_listxattr() (fs/ntfs3/xattr.c) where slab-out-of-bounds access could occur due to incorrect handling in the ea_all iteration when aea->name_len is 0, potentially reading invalid memory during listxattr(). The vend...

Malicious code in @dramateas/consectetur-impedit-corrupti-ea (npm)

The package @dramateas/consectetur-impedit-corrupti-ea was found to contain malicious code...

MAL-2025-42205 Malicious code in @crabas0npm/alias-consequuntur-ea (npm)

The package @crabas0npm/alias-consequuntur-ea was found to contain malicious code...

Malicious code in @crabas0npm/molestiae-ea-magni-commodi (npm)

The package @crabas0npm/molestiae-ea-magni-commodi was found to contain malicious code...

Malicious code in @crabas0npm/ea-commodi-quod (npm)

The package @crabas0npm/ea-commodi-quod was found to contain malicious code...

Malicious code in @crabas0npm/sit-ea-consequatur (npm)

The package @crabas0npm/sit-ea-consequatur was found to contain malicious code...

Malicious code in @dramateas/beatae-ea-ullam-magni (npm)

The package @dramateas/beatae-ea-ullam-magni was found to contain malicious code...

Malicious code in @teamteanpm2024/aliquid-ea-modi (npm)

The package @teamteanpm2024/aliquid-ea-modi was found to contain malicious code...

Malicious code in @hishpr/ea-repellendus-quo (npm)

The package @hishpr/ea-repellendus-quo was found to contain malicious code...

Malicious code in @erboladaiorg/ea-aliquam (npm)

The package @erboladaiorg/ea-aliquam was found to contain malicious code...