EUVD-2026-1970

Malicious code in react-hook-form-js npm...

Malicious Package

Overview react-hook-form-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2023-4626

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ladiflowsavehook function in versions up to, and including, 4.3. This makes it possible for authenticated attackers with subscriber-level access and above to update the...

CVE-2022-31258

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000495)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000495 advisory. A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlin...

SUSE CVE-2022-50813

In the Linux kernel, the following vulnerability has been resolved: drivers: mcb: fix resource leak in mcbprobe When probe hook function failed in mcbprobe, it doesn't put the device. Compiled test only...

SUSE CVE-2023-54200

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: always release netdev hooks from notifier This reverts "netfilter: nftables: skip netdev events generated on netns removal". The problem is that when a veth device is released, the veth release callback will...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993083)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993083 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfttproxy: restrict to prerouting hook TPROXY is only allowed from prerouting, but...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993231)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993231 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: imx: Add missing .thawnoirq hook The following warning is seen with non-console UART...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992785 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: double hook unregistration in netns path nftreleasehooks is called from...

CVE-2022-50813

In the Linux kernel, the following vulnerability has been resolved: drivers: mcb: fix resource leak in mcbprobe When probe hook function failed in mcbprobe, it doesn't put the device. Compiled test only...

CVE-2022-50813

In the Linux kernel, the following vulnerability has been resolved: drivers: mcb: fix resource leak in mcbprobe When probe hook function failed in mcbprobe, it doesn't put the device. Compiled test only...

UBUNTU-CVE-2022-50813

In the Linux kernel, the following vulnerability has been resolved: drivers: mcb: fix resource leak in mcbprobe When probe hook function failed in mcbprobe, it doesn't put the device. Compiled test only...

CVE-2022-50813

Linux kernel CVE-2022-50813 affects the mcb driver: the probe path in mcb_probe can leak resources if the probe hook fails, failing to put the device. The vulnerability has been resolved (compiled test only noted). Affected context is the mcb driver in the Linux kernel; no exploitation details ar...

PT-2025-53931

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the mcb probe function within the Linux kernel’s drivers. Specifically, if the probe hook function fails during the mcb probe process, the device is not release...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992441)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992441 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfttproxy: restrict to prerouting hook TPROXY is only allowed from prerouting, but...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992689)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992689 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: double hook unregistration in netns path nftreleasehooks is called from...

SUSE CVE-2022-50780

In the Linux kernel, the following vulnerability has been resolved: net: fix UAF issue in nfqnlnfhookdrop when opsinit failed When the opsinit interface is invoked to initialize the net, but ops-init fails, data is released. However, the ptr pointer in net-gen is invalid. In this case, when...

SUSE CVE-2023-54025

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled In case WoWlan was never configured during the operation of the system, the hw-wiphy-wowlanconfig will be NULL. rsiconfigwowlan checks whether wowlanconfig is...

EUVD-2022-55781

In the Linux kernel, the following vulnerability has been resolved: net: fix UAF issue in nfqnlnfhookdrop when opsinit failed When the opsinit interface is invoked to initialize the net, but ops-init fails, data is released. However, the ptr pointer in net-gen is invalid. In this case, when...