ALSA-2026:0786 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: libceph: fix potential use-after-free in havemonandosdmap CVE-2025-68285 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

ALSA-2026:0793 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/xe: Make dma-fences compliant with the safe access rules CVE-2025-38703 kernel: smb: client: let recvdone verify dataoffset, datalength and remainingdatalength CVE-2025-39933 kernel:...

RLSA-2026:0443 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: media: rc: fix races with imondisconnect CVE-2025-39993 kernel: sctp: avoid NULL dereference when chunk data buffer is missing...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

ALSA-2026:0443 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: media: rc: fix races with imondisconnect CVE-2025-39993 kernel: sctp: avoid NULL dereference when chunk data buffer is missing...

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: media: rc: fix races with imondisconnect CVE-2025-39993 kernel: sctp: avoid NULL dereference when chunk data buffer is missing...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: rc: fix races with imondisconnect CVE-2025-39993 kernel: sctp: avoid NULL dereference when chunk data buffer is missing CVE-2025-40240 kernel: libceph: fix potential use-after-free...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992711)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992711 advisory. In the Linux kernel, the following vulnerability has been resolved: ath11k: fix netdev open race Make sure to allocate resources needed before registering the device...

tipc: Fix use-after-free in tipc_mon_reinit_self().

...

EUVD-2025-199067

Malicious code in mon-package-react-typescript npm...

Malicious code in mon-package-react-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b741df148115219cefc4a7110caf4494a1b84698a1ffa9609550097e8f4894 The package mon-package-react-typescript was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190976 Malicious code in mon-package-react-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b741df148115219cefc4a7110caf4494a1b84698a1ffa9609550097e8f4894 The package mon-package-react-typescript was found to contain malicious code. Source: ghsa-malware...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990328 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayedwork and cephmoncstop The way the delayed work is handled in...

EUVD-2022-55451

Malicious code in bioql PyPI...

Malicious code in @espace-client-axafr/icc-mon-auto (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41863 Malicious code in @espace-client-axafr/icc-mon-auto (npm)

The package communicates with a domain associated with malicious activity...

CVE-2023-1491

A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects the function 0x220020 in the library MaxCryptMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach...

DEBIAN-CVE-2025-37743

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid memory leak while enabling statistics Driver uses monitor destination rings for extended statistics mode and standalone monitor mode. In extended statistics mode, TLVs are parsed from the buffer received from...

UBUNTU-CVE-2025-37743

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid memory leak while enabling statistics Driver uses monitor destination rings for extended statistics mode and standalone monitor mode. In extended statistics mode, TLVs are parsed from the buffer received from...