3734 matches found
EUVD-2025-205104
In the Linux kernel, the following vulnerability has been resolved: exfat: fix divide-by-zero in exfatallocatebitmap The variable maxracount can be 0 in exfatallocatebitmap, which causes a divide-by-zero error in the subsequent modulo operation i % maxracount, leading to a system crash. When...
CVE-2023-54070 igb: clean up in all error paths when enabling SR-IOV
In the Linux kernel, the following vulnerability has been resolved: igb: clean up in all error paths when enabling SR-IOV After commit 50f303496d92 "igb: Enable SR-IOV after reinit", removing the igb module could hang or crash depending on the machine when the module has been loaded with the maxv...
CVE-2023-54029 wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix iwlmvmmaxamsdusize for MLO For MLO, we cannot use vif-bssconf.chandef.chan-band, since that will lead to a NULL-ptr dereference as bssconf isn't used. However, in case of real MLO, we also need to take both LMA...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check the maxracount value, which could result in a divide-by-zero error...
Malicious code in chai-max (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf9b30832b678dc77fdae0e722638e2a3ff7ba5cf07b09960233418192dd073 The package chai-max was found to contain malicious code. Source: ghsa-malware a6e46cc56f071a0c9f8afeaa19cf981997f743503c55a5e155fd1c99bf53d3a4 Any...
EUVD-2025-204874
Malicious code in chai-max npm...
Malicious Package
Overview chai-max is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2025-192754 Malicious code in chai-max (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf9b30832b678dc77fdae0e722638e2a3ff7ba5cf07b09960233418192dd073 The package chai-max was found to contain malicious code. Source: ghsa-malware a6e46cc56f071a0c9f8afeaa19cf981997f743503c55a5e155fd1c99bf53d3a4 Any...
MAL-2025-192732 Malicious code in ddos-turbo-max (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60af90f55c99cdd17b11c3fcbf6fb3b0fcf15b42e35b1b1ab95817d4981c7211 The package ddos-turbo-max was found to contain malicious code...
EUVD-2025-204922
Malicious code in ddos-turbo-max npm...
Malicious code in ddos-turbo-max (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60af90f55c99cdd17b11c3fcbf6fb3b0fcf15b42e35b1b1ab95817d4981c7211 The package ddos-turbo-max was found to contain malicious code...
CVE-2025-34457
wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kissrecbyte located in src/kissframe.c. When processing crafted KISS frames that reach the maximum allowed frame length MAXKISSLEN, the function...
CVE-2025-34457
wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kissrecbyte located in src/kissframe.c. When processing crafted KISS frames that reach the maximum allowed frame length MAXKISSLEN, the function...
Security Bulletin: IBM Storage Ceph is vulnerable to CWE in Golang (CVE-2023-39325)
Summary Golang is used by IBM Storage Ceph in Grafana. CVE-2023-39325 Vulnerability Details CVEID:CVE-2023-39325 DESCRIPTION: A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991278)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991278 advisory. A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Improper Resource Shutdown or Release in PyTorch [CVE-2025-2953]
Summary IBM Watson Speech Services Cartridge is vulnerable to an Improper Resource Shutdown or Release in PyTorch, due to an issue found in PyTorch 2.6.0+cu124 that affects the function torch.mkldnnmaxpool2d CVE-2025-2953. PyTorch is used in our service runtimes. This vulnerabilitiy has been...
SUSE CVE-2025-40354
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix link-enc NULL pointer access why 1. dc-linksMAXLINKS array size smaller than actual requested. maxconnector + maxdpia + 4 virtual = 14. increase from 12 to 14. 2. hwinit access nul...
AZL-72727 CVE-2025-68156 affecting package azl-otel-collector 0.127.0-1
Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including flatten, min, max, mean, and median, perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the evaluation...
EUVD-2025-203797
In the Linux kernel, the following vulnerability has been resolved: libceph: replace BUGON with bounds check for map-maxosd OSD indexes come from untrusted network packets. Boundary checks are added to validate these against map-maxosd. idryomov: drop BUGON in cephgetprimaryaffinity, minor cosmet...
CVE-2025-68156
Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including "flatten", "min", "max", "mean", and "median", perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the...