Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: serial: Fixed a potential nullptrderef in mlbusioprobe The devmioremap function can return NULL in case of an error. Currently, mlbusioprobe does not check for this case, which could lead to a NULL pointer dereference. A NULL che...

bsk (2.8.33), bts-mlb (0.1.2) +41 more potentially affected by CVE-2025-4565 via protobuf (>=6.30.0, <=6.31.0)

protobuf PYPI version =6.30.0, =1.0.0, =4.0.7, =0.2.0b3, =1.0.1, =1.0.0, =1.10.0rc3, =0.0.0, =1.0.0rc1, =1.1.1 - isosegdenoise 0.1.2.dev310 and more Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38135)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38135 advisory. - In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in...

EUVD-2014-5880

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2025-38135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: Fix potential null-ptr-deref in mlbusioprobe devmioremap can return NULL on error. Currently, mlbusioprobe does not check for this case, which could...

SUSE CVE-2025-38135

In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlbusioprobe devmioremap can return NULL on error. Currently, mlbusioprobe does not check for this case, which could result in a NULL pointer dereference. Add NULL check after devmioremap t...

UBUNTU-CVE-2025-38135

In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlbusioprobe devmioremap can return NULL on error. Currently, mlbusioprobe does not check for this case, which could result in a NULL pointer dereference. Add NULL check after devmioremap t...

CVE-2025-38135

CVE-2025-38135 – Linux kernel (serial/mlb_usio_probe) NULL pointer dereference fix : The vulnerability arises when devm_ioremap() returns NULL on error and mlb_usio_probe() fails to check it, potentially leading to a NULL pointer dereference. The fix adds a NULL check after devm_ioremap() to prev...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the mlbusio driver not checking the ioremap return value, which could lead to null pointer dereferencing...

bsk (2.8.33), bts-mlb (0.1.2) +41 more potentially affected by CVE-2025-4565 via protobuf (>=6.30.0, <=6.31.0)

protobuf PYPI version =6.30.0, =1.0.0, =4.0.7, =0.2.0b3, =1.0.1, =1.0.0, =1.10.0rc3, =0.0.0, =1.0.0rc1, =1.1.1 - isosegdenoise 0.1.2.dev310 and more Source cves: CVE-2025-4565 Source advisory: MEND:CVE-2025-4565...

Malware in @bane-mlb/less-styles

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2025-27721

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential null pointer dereference issue has been identified in the Linux kernel. The devm ioremap function can return NULL on error, but the mlb usio probe function does not check f...

Malicious code in mlb-site-core (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9de998c89065e54ad576039f907182866e20268fdbabf834365503931267443d Any computer that has this package install...

cardinals.fanportal-mlb.com Cross Site Scripting vulnerability OBB-3959860

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

baseballsavant.mlb.com Cross Site Scripting vulnerability OBB-3933908

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

baseballsavant.mlb.com Cross Site Scripting vulnerability OBB-3901337

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

baseballsavant.mlb.com Cross Site Scripting vulnerability OBB-3882739

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

baseballsavant.mlb.com Cross Site Scripting vulnerability OBB-3878448

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

baseballsavant.mlb.com Cross Site Scripting vulnerability OBB-3503230

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

baseballsavant.mlb.com Cross Site Scripting vulnerability OBB-3417354

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...