kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...

CVE-2025-40342

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: use lock accessing portstate and rport state nvmefcunregisterremote removes the remote port on a lport object at any point in time when there is no active association. This races with with the reconnect logic, because...

Better Auth Passkey Plugin allows passkey deletion through IDOR

Summary Affected versions of the better-auth passkey plugin allow users with any valid session to delete arbitrary passkeys via their ID using POST /passkey/delete-passkey. Details ctx.body.id is implicitly trusted and used in passkey deletion queries. better-auth applications configured with...

MAL-2025-174460 Malicious code in goodain-nusia-nuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1e189d8fe46cded8a4786ebfcaba4c4bd01516ad426bdc28d8fc08bc795e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167760 Malicious code in teagood-sukuna1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f066415be82931a6d1682e6d0a0a286979c372f732bcdb65065581fc76d9753f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106988 Malicious code in patria-tumis45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a68d44343caf0d7cd21492ed70bbd1f6f12c5afbf9ec1f0d6ee3da118dab4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68013 Malicious code in emotional-beige-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269d347d59db0e0e9cc28cb51693903707c95e3f7d056d421282c05f820c8df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CLSA-2025-1761844489 Fix of 9 CVEs

SECURITY UPDATE: multiple vulnerabilities in AWK implementation - debian/patches/CVE-2021-423xx-awk.patch: fix issues with argument parsing, delete statement validation, length parsing, post-increment/decrement on literals, expression handling, regex splitting, use-after-realloc, and maxfields...

EUVD-2019-5054

Malware in sbrugna...

EUVD-2020-21743

Malware in sbrugna...

EUVD-2006-1246

Malware in sbrugna...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an atomic increment operation in the scsiqueuerq function that could lead to a kernel panic...

EUVD-2025-29465

Malicious code in bioql PyPI...

drm/sched: Increment job count before swapping tail spsc queue

...

serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO

...

Linux Distros Unpatched Vulnerability : CVE-2024-41046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiqetop: fix double free in detach The number of the currently released...

Linux Distros Unpatched Vulnerability : CVE-2020-29370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in kmemcacheallocbulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c7...

CVE-2024-58265

The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery...

GHSA-97F8-H76H-F297 Duplicate Advisory: Unauthenticated Nonce Increment in snow

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7g9j-g5jg-3vv3. This link is maintained to preserve external references. Original Description The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby...

Duplicate Advisory: Unauthenticated Nonce Increment in snow

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7g9j-g5jg-3vv3. This link is maintained to preserve external references. Original Description The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby...