CVE-2026-80779

A flaw was found in the net/ionic component of the Linux kernel. This out-of-bounds write vulnerability occurs because the dedicated hardware timestamp RX queue's index can be used to access memory beyond the bounds of the normal transmit queue array. An attacker could potentially exploit this to...

Malware in ionic-sound-cloud-loader-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ionic-tiktok-scraper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in appit-cordova-plugin-ionic

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ionic-insta-search

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ionic-youtube-search

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ionic-insta-api-wrapper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ionic-youtube-streams

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netifnapidel When queues are started, netifnapiadd and napienable are called. If there are 4 queues and only 3 queues are used for the current configuration, only 3 queues’ napi should be registered and...

@sumaris-net/ngx-components (18.5.0-alpha2), meta-g (>=1.0.0, <=1.0.494998) +1 more potentially affected by CVE-2026-103922 via @capacitor/android (>=6.1.2, <=6.2.0)

@capacitor/android NPM version =6.1.2, =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

meta-g (>=1.0.0, <=1.0.494998), metag-sdk-ionic (>=1.0.0, <=1.1.6) potentially affected by CVE-2026-103922 via @capacitor/ios (6.1.2)

@capacitor/ios NPM version 6.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @capacitor/ios and may be impacted: - meta-g =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: GHSA-RVM3-566M-V7FV...

meta-g (>=1.0.0, <=1.0.494998), metag-sdk-ionic (>=1.0.0, <=1.1.6) potentially affected by CVE-2026-103922 via @capacitor/ios (6.1.2)

@capacitor/ios NPM version 6.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @capacitor/ios and may be impacted: - meta-g =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

@sumaris-net/ngx-components (18.5.0-alpha2), meta-g (>=1.0.0, <=1.0.494998) +1 more potentially affected by CVE-2026-103922 via @capacitor/android (>=6.1.2, <=6.2.0)

@capacitor/android NPM version =6.1.2, =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: GHSA-RVM3-566M-V7FV...

meta-g (>=1.0.0, <=1.0.494998), metag-sdk-ionic (>=1.0.0, <=1.1.6) potentially affected by CVE-2026-103922 via @capacitor/ios (6.1.2)

@capacitor/ios NPM version 6.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @capacitor/ios and may be impacted: - meta-g =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: MEND:CVE-2026-103922...

EUVD-2025-209815

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

EUVD-2025-209814

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

EUVD-2025-209813

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

SUSE CVE-2026-89509

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Embed counter driver data in rdmacounter allocation Commit 7e53b31acc7f "RDMA/core: Create and destroy rdmacounter using rdmazallocdrvobj" requires drivers implementing counter ops to embed struct rdmacounter in a...

Linux Distros Unpatched Vulnerability : CVE-2026-89509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ionic: Embed counter driver data in rdmacounter allocation Commit 7e53b31acc7f RDMA/core: Create and destroy rdmacounter using rdmazallocdrvobj requires...

CVE-2026-89509

A flaw was found in the Linux kernel's RDMA/ionic driver. This vulnerability arises from the driver's incorrect handling of rdmacounter allocations, specifically by not embedding counter driver data as required. This oversight can lead to a NULL pointer dereference when the allocandbind function ...