Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: Fixed a use-after-free issue in fslmcbusremove. In fslmcbusRemove, mc-rootmcbusdev-mcio was passed to fsldestroymcio. However, mc-rootmcbusdev was already freed in fslmcDeviceRemove. As a result, referencing...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053248 advisory. In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use-after-free in fslmcbusremove In fslmcbusremove, mc-rootmcbusdev-mc...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bus: fsl-mc: Do not assume that child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as a child of fsl-mc devices, resulting in a crash when attempting to bind a fsl-mc device to VFIO. This...

MAL-2026-14305 Malicious code in mc-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e494af2871662b1b342a26141de010623484dfef353b505805f4b41d85d775c1 Package metadata describes mc-provider as 'Theta chain registry ⚛️' and the README is a verbatim copy of the hyperweb-io/chain-registry README...

Malicious code in mc-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e494af2871662b1b342a26141de010623484dfef353b505805f4b41d85d775c1 Package metadata describes mc-provider as 'Theta chain registry ⚛️' and the README is a verbatim copy of the hyperweb-io/chain-registry README...

Malicious code in mc-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f3053643e65c63fa7d8e3d5c48ae3d659650bd0052137099cd8674232780bc Package publishes as mc-registry with description 'Theta chain registry', but its README, badges, homepage layout, and package listing copy the...

MAL-2026-14294 Malicious code in mc-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f3053643e65c63fa7d8e3d5c48ae3d659650bd0052137099cd8674232780bc Package publishes as mc-registry with description 'Theta chain registry', but its README, badges, homepage layout, and package listing copy the...

PT-2026-72769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC amd acp-sdw-legacy component where the create sdw dailinks function iterates through soc dais until it finds an entry with the initialised flag cleared. Becau...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: spire-server, boring-registry, gitsign, minio, falcoctl, kubescape, falcoctl-fips, cosign-fips, spire-server-fips, mc, vexctl, tekton-chains, external-secrets-fips...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: spire-server, boring-registry, minio-fips, minio, falcoctl, falcoctl-fips, spire-server-fips, mc, boring-registry-fips, mc-fips, external-secrets-fips...

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: trillian, mc, minio-operator, karma, tempo, telegraf, mcp-grafana, istio, prometheus-pushgateway, jaeger, loki, datadog-agent, keda, grafana-pyroscope, aws-otel-collector, cloud-sql-proxy, splunk-otel-collector, minio-object-browser, minio, certificate-transparency...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: boring-registry, mc, spire-server, vexctl, gitsign, minio, tekton-chains, kubescape, falcoctl...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: boring-registry, mc, spire-server, minio, falcoctl...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: trillian, mc, fluent-bit-plugin-loki, k8sgpt, minio-operator, karma, tempo, amazon-cloudwatch-agent-operator, istio, prometheus, prometheus-pushgateway, jaeger, loki, metrics-server, datadog-agent, grafana, keda, node-problem-detector, aws-otel-collector,...

The vulnerability in the driver/bus/fsl-mc/fsl-mc-bus.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the drivers/bus/fsl-mc/fsl-mc-bus.c component in the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a system failure...

PT-2026-67771

Name of the Vulnerable Software and Affected Versions H3C Magic BE18000 version V200R007 H3C NX400 version V100R015 H3C Magic NX30 Pro version V100R0011 H3C Magic R3010 version V100R009 H3C Magic NX15 version V100R017 H3C Magic R1510 version V100R016 H3C NE36 Pro version V100R002 H3C MC102G HM1A...

MiracleLinux 9 : glibc-2.34-272.el9_8 (AXSA:2026-1432:09)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1432:09 advisory. glibc: glibc: Heap Buffer Overflow in scanf with %mc format specifier and large width CVE-2026-5450 Tenable has extracted the preceding description block...

MAL-2026-10637 Malicious code in mc-reg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ca15954536abe30ea5c7f5bc5a06192f3946c98d74edef9d90edbc52cb9d95 mc-reg advertises itself as a Cosmos chain-registry data package README shows chain-registry-style assets/chains/ibc API, but its main and ESM...

Malicious code in mc-reg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ca15954536abe30ea5c7f5bc5a06192f3946c98d74edef9d90edbc52cb9d95 mc-reg advertises itself as a Cosmos chain-registry data package README shows chain-registry-style assets/chains/ibc API, but its main and ESM...

glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

A flaw was found in glibc GNU C Library. This vulnerability occurs when an application uses the scanf family of functions with a %mc format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination c...