kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()

In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix use-after-free issue in ethskbpkttype KMSAN reported a use-after-free issue in ethskbpkttype1. The cause of the issue was that ethskbpkttype accessed skb's data that didn't contain an Ethernet header. This occur...

ALSA-2025:14009 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: bpf, testrun: Fix use-after-free issue in ethskbpkttype CVE-2025-21867 kernel: net: fix udp gso skbsegment after pull from fraglist CVE-2025-38124 kernel: Bluetooth: hcicore: Fix...

MAL-2025-11360 Malicious code in @zalastax/nolb-eth- (npm)

The package @zalastax/nolb-eth- was found to contain malicious code...

Malicious code in @zalastax/nolb-eth- (npm)

The package @zalastax/nolb-eth- was found to contain malicious code...

UBUNTU-CVE-2025-51823

libcsp 2.0 is vulnerable to Buffer Overflow in the cspethinit function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member ctx-name without validating the input length...

CVE-2025-51823

libcsp 2.0 is vulnerable to Buffer Overflow in the cspethinit function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member ctx-name without validating the input length...

CVE-2025-8816

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function setOpMode of the file /goform/setOpMode. The manipulation of the argument ethConv leads to stack-based buffer overflow. It is possible to launch the attack remotely...

Linux Distros Unpatched Vulnerability : CVE-2025-38341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-map FW msg The semantics are that caller o...

Linux Distros Unpatched Vulnerability : CVE-2023-52876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629-eth: Add check for mtkallocclkdata Add the check for the return...

MAL-2025-5998 Malicious code in eth-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7abd5491d54b588d04ced891539747a0d295877ddfcba02d67fa05ff8953d60b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7abd5491d54b588d04ced891539747a0d295877ddfcba02d67fa05ff8953d60b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-52364

Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service telnetd by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if...

Malicious code in eth-multisig-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0011f8c820d2bf5736f029e749e3b1eb172ec056d5d712b620b95ef9ba5aa4dd Any computer that has this package installed or running should be considered...

MAL-2025-5643 Malicious code in eth-multisig-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0011f8c820d2bf5736f029e749e3b1eb172ec056d5d712b620b95ef9ba5aa4dd Any computer that has this package installed or running should be considered...

Malicious code in eth-auditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aec778b05fe218b568dcb73221cdade5489641b92ce59e4baf3a6b50298bee0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5158 Malicious code in eth-auditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aec778b05fe218b568dcb73221cdade5489641b92ce59e4baf3a6b50298bee0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2018-25112

CVE-2018-25112 affects the PHOENIX CONTACT ILC 1x1 ETH programmable controllers. The vulnerability stems from an uncontrolled resource consumption in the IEC 61131 program, allowing an unauthenticated remote attacker to generate large amounts of network traffic that must be processed by the ILC, ...

Malicious code in staking-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4731478e6aab60180622e956a2bb2f96e9fc476bad9c3e95b18183e8cb7ccbe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1930

An exponential ReDoS Regular Expression Denial of Service can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encodestructureddata method...

SUSE CVE-2025-37935

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: fix SER panic with 4GB+ RAM If the mtkpollrx function detects the MTKRESETTING flag, it will jump to releasedesc and refill the high word of the SDP on the 4GB RFB. Subsequently, mtkrxclean will process ...