Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the IPMI message stack, which could lead to an infinite loop...

CVE-2025-40192: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a zynqmp-ipi mailbox cleanup loop index error that could lead to out-of-bounds access...

EulerOS 2.0 SP12 : udisks2 (EulerOS-SA-2025-2343)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the...

Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2343)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2374)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990795 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus If deviceregister fails in...

MAL-2025-136047 Malicious code in okta-ketan89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cb88d455c3d18c403d061ccea14a825bd5203daa00210dc69eed798230dff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f4acee61152fe0ceb357f6f0ebbd9c7235da6446295403d54fc4c65bbe4b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d226b7fb0852dbc52c39e1f9cd3dd782b7f42056702776c14c6cd78959d4394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lepet56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d2e8d12ef524085f5cb0befa14c80d658115663728bf332695663b2b688a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-botok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da549713d03eab9df6073e664a77f3477501b4a959f2f85890eed6855510149f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-sate42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d3538ffcdde19c731b6e799ed9dd7fbffe5e77618ac3e101c7adccb27de975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specified_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd51f83dc69d21de933f66be02456741c367c9999ddaac791d6ccc7f1caf55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 312b8e26f02912661a6da42e626b76ca53b086c60258ecebb4ec4a7256297488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137018 Malicious code in siska-pecel88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b05e39ab78ff505c211e2d148627d30c84918a093e350e80bb2ca47df22c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132939 Malicious code in double_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe807713a12f26d83b9bf1cbef8b223469428fdb7cda1c835dd228ca7cf3a21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136343 Malicious code in putra-soto60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9540a032939bdb5ec29dcde6b152aaca8f0c84d58d26855738446a46cda784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132286 Malicious code in blind_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77982755595068040bd3ef2a005a17e10c740de09a184bf03c18469658a41960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132480 Malicious code in cindy-klentik76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aceb44db4ff634545ead6725cc044a05d70e21882d69212fd1c640bfc1fed8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...