EUVD-2025-12886

Malicious code in bioql PyPI...

EUVD-2025-11377

Malicious code in bioql PyPI...

EUVD-2022-50674

Malicious code in bioql PyPI...

EUVD-2022-55614

Malicious code in bioql PyPI...

EUVD-2024-53278

Malicious code in bioql PyPI...

EUVD-2025-20948

Malicious code in bioql PyPI...

EUVD-2024-53200

Malicious code in bioql PyPI...

EUVD-2024-21106

Malicious code in bioql PyPI...

EUVD-2021-33718

Malicious code in bioql PyPI...

EUVD-2022-33578

Malicious code in bioql PyPI...

EUVD-2024-51849

Malicious code in bioql PyPI...

SUSE CVE-2022-50468

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosusbpdnotify: Fix error handling in crosusbpdnotifyinit The following WARNING message was given when rmmod crosusbpdnotify: Unexpected driver unregister! WARNING: CPU: 0 PID: 253 at drivers/base/driver.c:270...

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function

Impact In LXD's images export API /1.0/images/fingerprint/export, implementation differences in error handling allow determining project existence without authentication. Specifically, in the following code, errors when multiple images match are directly returned to users as API responses:...

GHSA-P3X5-MVMP-5F35 Canonical LXD Project Existence Determination Through Error Handling in Image Export Function

Impact In LXD's images export API /1.0/images/fingerprint/export, implementation differences in error handling allow determining project existence without authentication. Specifically, in the following code, errors when multiple images match are directly returned to users as API responses:...

Canonical LXD Project Existence Determination Through Error Handling in Image Get Function

Impact The LXD /1.0/images endpoint is implemented as an AllowUntrusted API that requires no authentication, making it accessible to users without accounts. This API allows determining project existence through differences in HTTP status codes when accessed with the project parameter...

CVE-2023-53468

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in allocwbufs kmemleak reported a sequence of memory leaks, and show them as following: unreferenced object 0xffff8881575f8400 size 1024: comm "mount", pid 19625, jiffies 4297119604 age 20.383s hex dump fir...

CVE-2025-39920

In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for addinterval in dovalidatemem In the dovalidatemem, the call to addinterval does not handle errors. If kmalloc fails in addinterval, it could result in a null pointer being inserted into the linked...

CVE-2025-39923

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bamdma: Fix DT error handling for num-channels/ees When we don't have a clock specified in the device tree, we have no way to ensure the BAM is on. This is often the case for remotely-controlled or remotely-power...

CVE-2025-39897

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaenginedescgetmetadataptr which can return an error pointer and lead to potential crashes or undefined behaviour if the...

CVE-2025-54290

CVE-2025-54290 affects Canonical LXD before 6.5 and 5.21.4 on Linux. The vulnerability lies in the image export API, where error handling and LIKE wildcard matching can reveal project existence without authentication. An attacker can remotely determine whether a project exists by sending crafted ...