EUVD-2025-201634

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled, dmaalloccoherent with GFPUSER may return addresses from the vmalloc range. If such an address is mapped without VMMIXEDMAP,...

DEBIAN-CVE-2025-40311

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled, dmaalloccoherent with GFPUSER may return addresses from the vmalloc range. If such an address is mapped without VMMIXEDMAP,...

UBUNTU-CVE-2025-40311

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled, dmaalloccoherent with GFPUSER may return addresses from the vmalloc range. If such an address is mapped without VMMIXEDMAP,...

CVE-2025-40311

Summary: CVE-2025-40311 in the Linux kernel involves IOMMU-enabled dma_alloc_coherent() potentially returning vmalloc-range addresses. Affected code path: accel/habanalabs mapping of cb with vmalloc-backed coherent memory. Root cause: vm_insert_page() could trigger BUG_ON due to VM_PFNMAP restric...

CVE-2025-40311

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled, dmaalloccoherent with GFPUSER may return addresses from the vmalloc range. If such an address is mapped without VMMIXEDMAP,...

CVE-2025-40311 accel/habanalabs: support mapping cb with vmalloc-backed coherent memory

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled, dmaalloccoherent with GFPUSER may return addresses from the vmalloc range. If such an address is mapped without VMMIXEDMAP,...

KDE Applications 安全漏洞

KDE Applications is an open source software suite from the KDE community that provides over 200 applications that run on any Linux desktop as well as other platforms. A security vulnerability exists in KDE Applications versions prior to 25.08.0, which stems from the use of QIODevice::ReadWrite ma...

CVE-2025-55174

In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly...

Lessons Lost: Incident Response in the Age of Cyber Insurance and Breach Attorneys

Incident Response IR allows victim firms to detect, contain, and recover from security incidents. It should also help the wider community avoid similar attacks in the future. In pursuit of these goals, technical practitioners are increasingly influenced by stakeholders like cyber insurers and...

EUVD-2025-116956

Malicious code in mixedbearz3n npm...

EUVD-2025-103739

Malicious code in mixedgoosez3n npm...

EUVD-2025-103740

Malicious code in mixedarmadilloz3n npm...

EUVD-2025-96435

Malicious code in mixedsolez3n npm...

CVE-2025-24847

Improper input validation for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may...

EUVD-2025-90051

Malicious code in mixedkangarooz3n npm...

EUVD-2025-76265

Malicious code in mixedeel-appteadev npm...

EUVD-2025-76264

Malicious code in mixedguppy-smiletea npm...

EUVD-2025-63038

Malicious code in mixedwalrusz3n npm...

Malicious code in mixed_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f214391b654f601c0ced4c92ef67945fff3368a6daa677748c8a903609b360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mixed_fox_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab801bea8a7bcd11ee4f5c1d461174f4674f8cbc38f486025e05c7f7bd3cb59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...