EUVD-2019-17938

Malware in sbrugna...

EUVD-2022-54563

Malicious code in bioql PyPI...

EUVD-2025-9406

Malicious code in bioql PyPI...

EUVD-2025-12843

Malicious code in bioql PyPI...

EUVD-2025-22889

Malicious code in bioql PyPI...

EUVD-2024-51840

Malicious code in bioql PyPI...

EUVD-2025-15862

Malicious code in bioql PyPI...

EUVD-2025-5193

Malicious code in bioql PyPI...

EUVD-2025-7593

Malicious code in bioql PyPI...

CVE-2025-38256

CVE-2025-38256 involves io_uring/rsrc folio unpinning in the Linux kernel. The issue arises when pinning a folio’s tail page and then unpinning the head page via unpin_user_page*, which can trigger a debug warning in mm/gup.c. The provided connected Astra Linux bulletin confirms the root cause an...

PT-2025-27980 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A divide by zero issue has been resolved in the Linux kernel. The problem occurs when dummy values in the populate dummy dml surface cfg function are not updated, leading to a divide b...

CVE-2025-38040

In the Linux kernel, the following vulnerability has been resolved: serial: mctrlgpio: split disablems into sync and nosync APIs The following splat has been observed on a SAMA5D27 platform using atmelserial: BUG: sleeping function called from invalid context at kernel/irq/manage.c:738 inatomic: ...

PT-2025-26024 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A crash in the Linux kernel has been resolved, related to the scsi: qla2xxx module. The issue occurs due to stale SRB access around I/O timeouts. To fix this, the code now ensures that...

CVE-2025-37908

The CVE-2025-37908 issue affects the Linux kernel’s memory allocator slab subsystem. Root cause: slab->obj_exts was not reliably cleared during unaccount_slab() when mem_alloc_profiling_enabled() is false, allowing residual allocations to persist after shutdown_mem_profiling(). This can trigge...

PT-2025-22211

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A panic in the Linux kernel's ocfs2 module can occur due to a failed folio allocation. This issue arises when the folio array free code encounters an error value -ENOMEM instead of a val...

CVE-2025-22062

In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in procsctpdoudpport We must serialize calls to sctpudpsockstop and sctpudpsockstart or risk a crash as syzbot reported: Oops: general protection fault, probably for non-canonical address...

CVE-2023-52928

CVE-2023-52928 concerns the Linux kernel’s BPF verifier. According to connected sources, the issue arises from the verifier’s handling of invalid kfunc calls in backtrack_insn, where such an instruction could be captured by fixup_kfunc_call() and, if not eliminated by DCE, trigger a warning in ba...

CVE-2025-21883

CVE-2025-21883 affects the Linux kernel ice driver. The issue occurs when ice_ena_vfs() fails after ice_create_vf_entries(), causing VFs to be freed without removing them from the snapshot PF-VF mailbox list, leading to list corruption (possible kernel BUG in lib/list_debug.c and related traces)....

CVE-2025-21827 Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Add locks for usbdriverclaiminterface The documentation for usbdriverclaiminterface says that "the device lock" is needed when the function is called from places other than probe. This appears to be th...

CVE-2022-49397

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix struct clk leak on probe errors Make sure to release the pipe clock reference in case of a late probe error e.g. probe deferral...