Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

TencentOS Server 4: kernel (TSSA-2025:0429)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0429 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

SUSE CVE-2025-40171

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmetfclsreqop It's possible for more than one async command to be in flight from nvmetfcsendlsreq. For each command, a tgtport reference is taken. In the current code, only one put work item is...

CVE-2025-40171

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmetfclsreqop It’s possible for more than one async command to be in flight from nvmetfcsendlsreq. For each command, a tgtport reference is taken. In the current code, only one put work item is...

CVE-2025-40171

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmetfclsreqop It’s possible for more than one async command to be in flight from nvmetfcsendlsreq. For each command, a tgtport reference is taken. In the current code, only one put work item is...

CVE-2025-40171 nvmet-fc: move lsop put work to nvmet_fc_ls_req_op

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmetfclsreqop It’s possible for more than one async command to be in flight from nvmetfcsendlsreq. For each command, a tgtport reference is taken. In the current code, only one put work item is...

CVE-2025-40171

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmetfclsreqop It’s possible for more than one async command to be in flight from nvmetfcsendlsreq. For each command, a tgtport reference is taken. In the current code, only one put work item is...

CVE-2025-40171 nvmet-fc: move lsop put work to nvmet_fc_ls_req_op

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmetfclsreqop It’s possible for more than one async command to be in flight from nvmetfcsendlsreq. For each command, a tgtport reference is taken. In the current code, only one put work item is...

CVE-2025-40171

Technical details for CVE-2025-40171 are not provided in the supplied connected documents. Monitor for vendor advisories for affected products, versions, impact, and fixes.

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990494 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fclportptpsetup fclportptpsetup did not...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989724 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: filter out EXT4FCREPLAY from on-disk superblock field sstate The EXT4FCREPLAY bit in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990041 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting...

EUVD-2011-0655

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987387 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in...

EUVD-2025-16160

Malicious code in bioql PyPI...

EUVD-2025-32087

Malicious code in bioql PyPI...

MAL-2025-47876 Malicious code in fc-system-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 192ca56fc1f77c6e39d9fdded9dbee0f4973f1fc49ee37e5f773d9f60d70858c The OpenSSF Package Analysis project identified 'fc-system-testing' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in fc-system-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 192ca56fc1f77c6e39d9fdded9dbee0f4973f1fc49ee37e5f773d9f60d70858c The OpenSSF Package Analysis project identified 'fc-system-testing' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-53245 scsi: storvsc: Fix handling of virtual Fibre Channel timeouts

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device is handled by the...

CLSA-2025-1757693980 kernel: Fix of 40 CVEs

x86/kvm: Disable kvmclock on all CPUs on shutdown CVE-2021-47110 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - cifs: fix double free race when mount fails in cifsgetroot CVE-2022-48919 - aio: mark AIO pseudo-fs noexec CVE-2016-10044 - cifs:...