Malicious code in jnscript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 061c827dba1805eb29a15f2ecb9cc870bbc52edca26282a7a42d392de950ef42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47096 Malicious code in graphchain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f74a555cfba6dedc51a937d8cf8c843437538581dea703284d1e872317263f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2025:03190-1 Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005573 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in procgetinode bsc1242579. - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF bsc1237930. - CVE-2025-38001: netsched: hfsc: Address reentra...

MAL-2025-47070 Malicious code in hubmabels (npm)

The package hubmabels was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63ce5bde998604e80498a1f950aa6e92745b3011c1826f35e2e431b081b2a837 Any computer that has this package installed or running should be considered fully compromised...

MAL-2025-47058 Malicious code in epxressoo (npm)

The package epxressoo was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3319818dc603ffa75f3f426cb1533fc4b8e27f64161f4a3b71c268fa36d36503 Any computer that has this package installed or running should be considered fully compromised...

Malicious code in hrphelpall (npm)

The package hrphelpall was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0659e24ac59a9e845dfa85edafee8ebdfd35a1032ed6b06c19a7c20b80ca07c Any computer that has this package installed or running should be considered fully compromise...

MAL-2025-47010 Malicious code in @pa-client/power-code-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60c9037c2e5ca709c20fd2beb65a40e9649cbc3735c1989647ba5aae2889672d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47017 Malicious code in image_classification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33e5c05f2c70291fde5a4ace56b3aa015c8c407695c02395a9a4336285e964a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

drm/amd/display: prevent hang on link training fail

...

lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure

...

ethtool: fail closed if we can't get max channel used in indirection tables

...

Malicious code in hb-otc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b382c578afb33978acde21c28497857451795f4dea0da2d567e5df9a437e646e Any computer that has this package installed or running should be considered...

Malicious code in com.db.internetportal.es.olb-crossover-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d663acd7f33114b8fd15402308edcdbf8546ceeaf53aec128737ac8b324f4ead Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: net/sched: Always pass notifications when child class becomes empty

A use-after-free UAF vulnerability was found in the Linux kernel's net/sched subsystem, specifically in the Credit-Based Shaper CBS qdisc implementation schcbs. The vulnerability occurs because the CBS qdisc's reset function qdiscresetqueue only resets its internal queue but fails to reset its...

CVE-2025-49810 Thread summarization allows persistent access to channel

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

SUSE CVE-2025-38552

In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution i...

CVE-2025-38552

In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution i...

Linux Distros Unpatched Vulnerability : CVE-2020-29482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute paths containing a full pathname, or via a relative path, which...

CVE-2025-38552

In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution i...

CVE-2025-38552 mptcp: plug races between subflow fail and subflow creation

In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution i...