275 matches found
kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy
In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...
CVE-2025-40342
In the Linux kernel, the following vulnerability has been resolved: nvme-fc: use lock accessing portstate and rport state nvmefcunregisterremote removes the remote port on a lport object at any point in time when there is no active association. This races with with the reconnect logic, because...
Linux BPF Heap Buffer Overflow DoS
The vulnerability of the bpflinkinc function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux operating systems, relates to the reallocation of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failur...
Better Auth Passkey Plugin allows passkey deletion through IDOR
Summary Affected versions of the better-auth passkey plugin allow users with any valid session to delete arbitrary passkeys via their ID using POST /passkey/delete-passkey. Details ctx.body.id is implicitly trusted and used in passkey deletion queries. better-auth applications configured with...
MAL-2025-174460 Malicious code in goodain-nusia-nuai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1e189d8fe46cded8a4786ebfcaba4c4bd01516ad426bdc28d8fc08bc795e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-167760 Malicious code in teagood-sukuna1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f066415be82931a6d1682e6d0a0a286979c372f732bcdb65065581fc76d9753f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-106988 Malicious code in patria-tumis45-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a68d44343caf0d7cd21492ed70bbd1f6f12c5afbf9ec1f0d6ee3da118dab4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-68013 Malicious code in emotional-beige-eel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269d347d59db0e0e9cc28cb51693903707c95e3f7d056d421282c05f820c8df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CLSA-2025-1761844489 Fix of 9 CVEs
SECURITY UPDATE: multiple vulnerabilities in AWK implementation - debian/patches/CVE-2021-423xx-awk.patch: fix issues with argument parsing, delete statement validation, length parsing, post-increment/decrement on literals, expression handling, regex splitting, use-after-realloc, and maxfields...
EUVD-2020-21743
Malware in sbrugna...
EUVD-2006-1246
Malware in sbrugna...
EUVD-2019-5054
Malware in sbrugna...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an atomic increment operation in the scsiqueuerq function that could lead to a kernel panic...
EUVD-2025-29465
Malicious code in bioql PyPI...
CVE-2025-39764: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: remove refcounting in expectation dumpers Same pattern as previous patch: do not keep the expectation object alive via refcount, only store a cookie value and then use that as the skip hint for dump...
drm/sched: Increment job count before swapping tail spsc queue
...
serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
...
Linux Distros Unpatched Vulnerability : CVE-2024-41046
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiqetop: fix double free in detach The number of the currently released...
Linux Distros Unpatched Vulnerability : CVE-2020-29370
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in kmemcacheallocbulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c7...
