MAL-2025-40162 Malicious code in yam-lima-iksj (npm)

The package yam-lima-iksj was found to contain malicious code...

MAL-2025-37792 Malicious code in uniform-lima-mango-ovmhh (npm)

The package uniform-lima-mango-ovmhh was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-42127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/lima: fix shared irq handling on driver remove lima uses a shared interrupt, so the interrupt handlers must be prepared to be called at any time. At driver...

OESA-2025-1729 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:genirq/irqdesc: Prevent use-after-free in irqfindatorafterirqfindatorafter dereferences the interrupt descriptor which isreturned by mtfind while neither holding...

CVE-2023-32684

Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to version 0.16.0, a virtual machine instance with a malicious disk image could read a single file on the host filesystem, even when no filesystem is mounted from the host. The official templates of Lima and t...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/lima: The mask for IRQs is set in the timeout path before a hard reset. There is a race condition in which a rendering job may take just long enough to trigger the timeout handler for the DRM sched job, but it still completes...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/lima: Fix for shared interrupt handling during driver removal. lima uses a shared interrupt; therefore, the interrupt handlers must be prepared to be called at any time. During driver removal, the clocks are disabled early, a...

The vulnerability of DRM/LIMA components in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of DRM/LIMA components in the Linux operating system is related to incorrect calculations. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of the cfg80211 component in the Linux operating system allows a hacker to gain elevated privileges within the system.

The vulnerability of DRM/LIMA components in the Linux operating system is related to the state of the competition. Exploiting this vulnerability can allow a hacker to increase their privileges within the system...

The vulnerability of DRM/LIMA components in Linux operating systems allows attackers to increase their privileges within the system.

The vulnerability of DRM/LIMA components in the Linux operating system is related to the state of the competition. Exploiting this vulnerability can allow a hacker to increase their privileges within the system...

The vulnerability of DRM/LIMA components in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of DRM/LIMA components in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of DRM/LIMA components in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the DRM/Lima components in the Linux operating system is related to a memory leak in the limaheapalloc function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12610)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12610 advisory. - MIPS: Octeon: Add PCIe link status check Dave Kleikamp Orabug: 36947196 CVE-2024-40968 - drm/amdgpu: Fix signedness bug in sdmav40processtrapirq...

GO-2023-1803 In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima...

SUSE CVE-2024-42127

In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix shared irq handling on driver remove lima uses a shared interrupt, so the interrupt handlers must be prepared to be called at any time. At driver removal time, the clocks are disabled early and the interrupts stay...

CVE-2024-42127

In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix shared irq handling on driver remove lima uses a shared interrupt, so the interrupt handlers must be prepared to be called at any time. At driver removal time, the clocks are disabled early and the interrupts stay...

DEBIAN-CVE-2024-42127

In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix shared irq handling on driver remove lima uses a shared interrupt, so the interrupt handlers must be prepared to be called at any time. At driver removal time, the clocks are disabled early and the interrupts stay...

UBUNTU-CVE-2024-42127

In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix shared irq handling on driver remove lima uses a shared interrupt, so the interrupt handlers must be prepared to be called at any time. At driver removal time, the clocks are disabled early and the interrupts stay...

CVE-2024-42127

In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix shared irq handling on driver remove lima uses a shared interrupt, so the interrupt handlers must be prepared to be called at any time. At driver removal time, the clocks are disabled early and the interrupts stay...

CVE-2024-42127

CVE-2024-42127 affects the Linux kernel driver for Lima (drm/lima) which uses a shared IRQ. The root cause is that during driver removal, clocks are disabled early while interrupts remain registered due to devm-based management, allowing interrupt handlers to run and access device registers with ...