Amazon Linux 2023 : libssh, libssh-config, libssh-devel (ALAS2023-2025-1155)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1155 advisory. The privatekeyfromfile uses an uninitialized variable under certainconditions, such as if the file specified by the filename argument doesn'texist. This causes the code to return an invalid...

CVE-2025-39730 NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfsfhtodentry The function needs to check the minimal filehandle length before it can access the embedded filehandle...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly checking the length of file handles, which could lead to out-of-bounds access...

CVE-2025-48554

In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-48553

In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

drbd: add missing kref_get in handle_write_conflicts

...

CVE-2025-32327

creationtimestamp| type| source ---|---|--- 2025-09-06 04:33:05+00:00| seen| Telegram/kodg0dbSWTxCtIP2MD0sETIdRCQtxbPHOOqkoMdwdkyQ72w...

CVE-2025-39708 media: iris: Fix NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix NULL pointer dereference A warning reported by smatch indicated a possible null pointer dereference where one of the arguments to API "irishfigen2handlesystemerror" could sometimes be null. To fix this, add a che...

Malicious code in handle-pattern-east (npm)

The package handle-pattern-east was found to contain malicious code...

Malicious code in @crabas0npm/eaque-ab-aliquid (npm)

The package @crabas0npm/eaque-ab-aliquid was found to contain malicious code...

Malicious code in @crabas0npm/alias-dolorum-corrupti-sint (npm)

The package @crabas0npm/alias-dolorum-corrupti-sint was found to contain malicious code...

MAL-2025-44537 Malicious code in handle-entire-bow (npm)

The package handle-entire-bow was found to contain malicious code...

MAL-2025-44538 Malicious code in handle-pattern-east (npm)

The package handle-pattern-east was found to contain malicious code...

Malicious code in @devtea2026/quo-odio-nobis-labore (npm)

The package @devtea2026/quo-odio-nobis-labore was found to contain malicious code...

Malicious code in handle-entire-bow (npm)

The package handle-entire-bow was found to contain malicious code...

SUSE CVE-2025-38682

In the Linux kernel, the following vulnerability has been resolved: i2c: core: Fix double-free of fwnode in i2cunregisterdevice Before commit df6d7277e552 "i2c: core: Do not dereference fwnode in struct device", i2cunregisterdevice only called fwnodehandleput on ofnode-s in the form of calling...

SUSE CVE-2025-38708

In the Linux kernel, the following vulnerability has been resolved: drbd: add missing krefget in handlewriteconflicts With two-primaries enabled, DRBD tries to detect "concurrent" writes and handle write conflicts, so that even if you write to the same sector simultaneously on both nodes, they en...

CVE-2025-22434

In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48554

In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-48554

In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...