MAL-2025-32178 Malicious code in reveal-md-virtualreality-nodejs-equinox (npm)

The package reveal-md-virtualreality-nodejs-equinox was found to contain malicious code...

Malicious code in bootes-primatology-commitlint-reveal-md (npm)

The package bootes-primatology-commitlint-reveal-md was found to contain malicious code...

Malicious code in hyperion-reveal-md-wasat-ganymede (npm)

The package hyperion-reveal-md-wasat-ganymede was found to contain malicious code...

Malicious code in omega-cms-lf-ng-md-file-input (npm)

The package omega-cms-lf-ng-md-file-input was found to contain malicious code...

Malicious code in neptune-hermes-taurus-reveal-md (npm)

The package neptune-hermes-taurus-reveal-md was found to contain malicious code...

Malicious code in reveal-md-process-boson-boson (npm)

The package reveal-md-process-boson-boson was found to contain malicious code...

MAL-2025-32176 Malicious code in reveal-md-genomics-blackhole-meissa (npm)

The package reveal-md-genomics-blackhole-meissa was found to contain malicious code...

MAL-2025-27284 Malicious code in neptune-hermes-taurus-reveal-md (npm)

The package neptune-hermes-taurus-reveal-md was found to contain malicious code...

MAL-2025-15976 Malicious code in bootes-primatology-commitlint-reveal-md (npm)

The package bootes-primatology-commitlint-reveal-md was found to contain malicious code...

Malicious code in gravitationalwave-wormhole-publish-reveal-md (npm)

The package gravitationalwave-wormhole-publish-reveal-md was found to contain malicious code...

Malicious code in @zalastax/nolb-_react-md (npm)

The package @zalastax/nolb-react-md was found to contain malicious code...

luis-reddit-cli (1.0.0), md-links-larissadepaula (>=0.2.0, <=0.2.1) +1 more potentially affected by unknown CVE via node-fecth (0.0.1-security)

node-fecth NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-fecth and may be impacted: - luis-reddit-cli 1.0.0 - md-links-larissadepaula =0.2.0, =0.0.37, =0.0.40 Source cves: unknown CVE Source advisory: OSV:MAL-2025-2761...

MAL-2025-32177 Malicious code in reveal-md-process-boson-boson (npm)

The package reveal-md-process-boson-boson was found to contain malicious code...

kernel: drivers:md:fix a potential use-after-free bug

A use-after-free bug exists in the linux kernel such that in the line "raid5releasestripesh;" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines "if sh-batchhead && sh != sh-batchhead" resulting in a minor application crash...

DEBIAN-CVE-2025-38500

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...

CVE-2025-38500

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...

UBUNTU-CVE-2025-38500

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...

CVE-2025-38500 xfrm: interface: fix use-after-free after changing collect_md xfrm interface

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...

CVE-2025-38500 xfrm: interface: fix use-after-free after changing collect_md xfrm interface

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...

Linux Distros Unpatched Vulnerability : CVE-2025-22126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating allmddevs list While iterating allmddevs list from...