CVE-2026-40614

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is a buffer overflow when decoding Opus audio frames due to insufficient buffer size validation in the Opus codec decode path. The FEC decode buffers decframe.buf were allocated based on a...

PT-2026-34044

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.17 Description A heap buffer overflow occurs when decoding Opus audio frames due to insufficient buffer size validation in the Opus codec decode path. The FEC decode buffers dec frame.buf are allocated using a...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011303 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fec: Better handle pmruntimeget failing in .remove In the unlikely event that pmruntimeget...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007584)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007584 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fec: remove .ndopollcontroller to avoid deadlocks There is a deadlock issue found in sungem...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005614)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005614 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fec: Better handle pmruntimeget failing in .remove In the unlikely event that pmruntimeget...

OESA-2026-1228 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: fec: remove .ndopollcontroller to avoid deadlocks There is a deadlock issue found in sungem driver, please refer to the commit ac0a230f719b "eth: sungem:...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21676)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21676 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: fec: handle pagepooldevallocpages...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: fec: Fixed a possible issue related to NPD in fecenetPhyResetAfterclkEnable. The function phyfinddevice may return NULL, so we need to be careful when dereferencing phydev...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992523 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fec: Better handle pmruntimeget failing in .remove In the unlikely event that pmruntimeget...

SUSE-SU-2025:21040-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38008: mm/pagealloc: fix race condition in unaccepted memory handling bsc1244939. - CVE-2025-38539: trace/fgraph: Fix the warning caused by missi...

MAL-2025-49313 Malicious code in fec-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74bf7ef4160cbd326cf0897bab905bbc059392581da57f6b10e99471e5c60c7 The package fec-cms was found to contain malicious code. Source: ossf-package-analysis 110aae9d904f5e4469a068418b8fe0f1fdf2094e4945829b8793584539f2a9...

Malicious code in fec-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74bf7ef4160cbd326cf0897bab905bbc059392581da57f6b10e99471e5c60c7 The package fec-cms was found to contain malicious code. Source: ossf-package-analysis 110aae9d904f5e4469a068418b8fe0f1fdf2094e4945829b8793584539f2a9...

EUVD-2021-18273

Malware in sbrugna...

EUVD-2025-2625

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-39876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fec: Fix possible NPD in fecenetphyresetafterclkenable The function ofphyfinddevice may return NULL, so we need to take care before dereferencing phydev...

SUSE CVE-2025-39876

In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fecenetphyresetafterclkenable The function ofphyfinddevice may return NULL, so we need to take care before dereferencing phydev...

CVE-2025-39876

In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fecenetphyresetafterclkenable The function ofphyfinddevice may return NULL, so we need to take care before dereferencing phydev...

AZL-74933 CVE-2025-39876 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fecenetphyresetafterclkenable The function ofphyfinddevice may return NULL, so we need to take care before dereferencing phydev...

AZL-67659 CVE-2025-39876 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fecenetphyresetafterclkenable The function ofphyfinddevice may return NULL, so we need to take care before dereferencing phydev...

UBUNTU-CVE-2025-39876

In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fecenetphyresetafterclkenable The function ofphyfinddevice may return NULL, so we need to take care before dereferencing phydev...