Malicious code in sonic-kg-tiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8765cb416d290f51e091b7f41eed70c0d2949e48b83cdc84ddde54afe7c17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

AZL-70106 CVE-2025-40192 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

CVE-2025-40192

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

DEBIAN-CVE-2025-40192

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

DEBIAN-CVE-2025-40180

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

AZL-70064 CVE-2025-40180 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

UBUNTU-CVE-2025-40192

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

UBUNTU-CVE-2025-40180

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

CVE-2025-40192

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

CVE-2025-40192

CVE-2025-40192 concerns the Linux kernel where a revert of the IPMI msg-stack fix (ipmi: fix msg stack when IPMI is disconnected) introduced a subtle bug. According to the description, certain BMCs can cause the IPMI driver to enter an infinite loop when misbehaving in a specific way, and reports...

CVE-2025-40192 Revert "ipmi: fix msg stack when IPMI is disconnected"

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

CVE-2025-40180

The CVE-2025-40180 fix applies to the Linux kernel mailbox driver for zynqmp-ipi. The cleanup loop started at the wrong array index, causing out-of-bounds memory access. The patch starts the loop at the correct index for zero-based arrays to prevent memory overrun and memory safety issues. Remedi...

CVE-2025-40180 mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

MAL-2025-181441 Malicious code in baso81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6b7651f46986b656741d0f4804751981aebbd24718f11d523b1de51b03eb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f75b65d5658121d90cab9073f180064d9f786349b965f5b15f2bc93050f45c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d04eb8ab94bb5bbf59091db66d912a83ffff2b31e18e8f6420c3128f94a2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-efiuivcafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac024110b55a1d765bd54813bcf56efbcbd548576ec0804b563af8f386374110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-rodras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5011c07d1bbdca4ecb43c572ee1aad91b5a522c8afeb17bcc4517a8dbbe9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papmoa-yama0paiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816394c40772cbc527d0d6d21e86b2e429a39ad04bec509f847c9c3fc9b6a92a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181121 Malicious code in teate-thy-sonic-zacam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d791cfce26f0826292210a4f58c51526758b7d9760d1a133cc6de52766048acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...