Linux Distros Unpatched Vulnerability : CVE-2021-3629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of servi...

CVE-2025-38607

In the Linux kernel, the following vulnerability has been resolved: bpf: handle jset if a & b ... as a jump in CFG computation BPFJSET is a conditional jump and currently verifier.c:canjump does not know about that. This can lead to incorrect live registers and SCC computation. E.g. in the...

DEBIAN-CVE-2025-38582

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsvqp rsvqp may be double destroyed in error flow, first in freemrinit, and then in hnsroceexit. Fix it by moving the freemrinit call into hnsrocev2init. listdel corruption, ffff589732eb9b50-ne...

UBUNTU-CVE-2025-38607

In the Linux kernel, the following vulnerability has been resolved: bpf: handle jset if a & b ... as a jump in CFG computation BPFJSET is a conditional jump and currently verifier.c:canjump does not know about that. This can lead to incorrect live registers and SCC computation. E.g. in the...

CVE-2025-38607

In the Linux kernel, the following vulnerability has been resolved: bpf: handle jset if a & b ... as a jump in CFG computation BPFJSET is a conditional jump and currently verifier.c:canjump does not know about that. This can lead to incorrect live registers and SCC computation. E.g. in the...

CVE-2025-38607

CVE-2025-38607 refers to a Linux kernel issue in the BPF verifier where BPF_JSET (conditional jump) was not handled correctly in CFG/live register/SCC computation. The described flaw could cause incorrect live-register tracking and SCC analysis due to can_jump() not accounting for jset, potential...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the bpf module not treating jset as a jump in CFG calculations...

PT-2025-33805 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where the BPF JSET conditional jump is not correctly handled during control flow graph CFG computation. This can lead to incorrect live register and...

VerilogLAVD: LLM-Aided Rule Generation for Vulnerability Detection in Verilog

Timely detection of hardware vulnerabilities during the early design stage is critical for reducing remediation costs. Existing early detection techniques often require specialized security expertise, limiting their usability. Recent efforts have explored the use of large language models LLMs for...

Malicious code in commonweb-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e116400179d508d6dbe723a75f049d05218e1b019474bca84f2ed62537219572 [email protected] declares its sole dependency linker-event-header-serial as a direct tarball URL on artifacts.yosiroute.com not the npm...

MAL-2025-6894 Malicious code in commonweb-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e116400179d508d6dbe723a75f049d05218e1b019474bca84f2ed62537219572 [email protected] declares its sole dependency linker-event-header-serial as a direct tarball URL on artifacts.yosiroute.com not the npm...

CVE-2025-38507

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: avoid bluetooth suspend/resume stalls Ensure we don't stall or panic the kernel when using bluetooth-connected controllers. This was reported as an issue on android devices using kernel 6.6 due to the resume hook...

Linux Distros Unpatched Vulnerability : CVE-2024-40940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail In case of flow rul...

Malicious code in shopify_flow_app (npm)

The package shopifyflowapp was found to contain malicious code...

MAL-2025-20717 Malicious code in flow_trigger_connector (npm)

The package flowtriggerconnector was found to contain malicious code...

Malicious code in flow_trigger_connector (npm)

The package flowtriggerconnector was found to contain malicious code...

Malicious code in airbnb-flow (npm)

The package airbnb-flow was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security cf721a7ab34d44cd6e6bd7fa345aa5926234cdaa069ab71e315ee5780227c2b2 This package installs a dependency hosted on a custom domain that runs an inf...

Malicious code in flow_actions_connector (npm)

The package flowactionsconnector was found to contain malicious code...

MAL-2025-20716 Malicious code in flow_actions_connector (npm)

The package flowactionsconnector was found to contain malicious code...

MAL-2025-14189 Malicious code in airbnb-flow (npm)

The package airbnb-flow was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security cf721a7ab34d44cd6e6bd7fa345aa5926234cdaa069ab71e315ee5780227c2b2 This package installs a dependency hosted on a custom domain that runs an inf...