vsock: Ignore signal/timeout on connect() if already established

...

CVE-2025-40248

The CVE CVE-2025-40248 is supported by connected advisories detailing a vsock connect() race in the Linux kernel. Root cause: during connect(), signals/timeouts could cause disconnection of an already established vsock, racing with sendmsg() and other transport state changes. This could permanent...

CVE-2025-40248 vsock: Ignore signal/timeout on connect() if already established

In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect if already established During connect, acting on a signal/timeout by disconnecting an already established socket leads to several issues: 1. connect invoking vsocktransportcancelpkt -...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from vsock incorrectly handling signals/timeouts when a connection has been established, potentially leading to...

MAL-2025-190751 Malicious code in @posthog/plugin-contrib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcd017c0dad0f7c8771c40b6fbc9308cf19b77a704f62856696156fb3cf156b The package @posthog/plugin-contrib was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-99121

Malicious code in establishedswordfishz3n npm...

Malicious code in established_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2d21ea766122942bf5e931f4348ef567a71ceb775c21bf8ed5e780c98670be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126290 Malicious code in established_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80fc979b31d4d7230994455d30c35cbf69c305446fbc058b8d7e5023cd2ef4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92142

Malicious code in establishedcrocodilez3n npm...

EUVD-2025-79313

Malicious code in establishedpenguinz3n npm...

MAL-2025-102250 Malicious code in established_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d921d9c3d3282a929c82f06c159ffc03f5cbfdc44a76f1a0794ad6d5392366d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in established_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10f088aadf3df8bd75ad258e198049f5e5dfbb095ae306f83f2480ad2be3d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82028

Malicious code in establishedparrotfish0xrequest npm...

EUVD-2025-64260

Malicious code in establishedmousez3n npm...

EUVD-2025-64259

Malicious code in establishedparakeetz3n npm...

EUVD-2025-64258

Malicious code in establishedsalamanderz3n npm...

EUVD-2025-54569

Malicious code in established-blue-ocelot npm...

EUVD-2025-54567

Malicious code in established-ivory-aardwolf npm...

EUVD-2025-54566

Malicious code in established-silver-newt npm...

Malicious code in established-coral-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16856a202c2147cf8ae3ab02b3c54bb9bf09b450a6a17f6960efedac87deb8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...