UBUNTU-CVE-2023-53427

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR recovery work not initialized and list not cleared. Then will be warning and UAF when release the MR: WARNING: CPU: 4 PID: 824 at...

scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs

...

SUSE CVE-2025-38582

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsvqp rsvqp may be double destroyed in error flow, first in freemrinit, and then in hnsroceexit. Fix it by moving the freemrinit call into hnsrocev2init. listdel corruption, ffff589732eb9b50-ne...

Malicious code in @zalastax/nolb-_mr (npm)

The package @zalastax/nolb-mr was found to contain malicious code...

Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-mr (npm)

The package @zalastax/nolb-hyperfunfluentui-emoji-mr was found to contain malicious code...

MAL-2025-10091 Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-mr (npm)

The package @zalastax/nolb-hyperfunfluentui-emoji-mr was found to contain malicious code...

MAL-2025-10235 Malicious code in @zalastax/nolb-_mr (npm)

The package @zalastax/nolb-mr was found to contain malicious code...

CVE-2025-38373

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix potential deadlock in MR deregistration The issue arises when kzalloc is invoked while holding umemmutex or any other lock acquired under umemmutex. This is problematic because kzalloc can trigger fsreclaimaqcuire,...

UBUNTU-CVE-2025-38373

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix potential deadlock in MR deregistration The issue arises when kzalloc is invoked while holding umemmutex or any other lock acquired under umemmutex. This is problematic because kzalloc can trigger fsreclaimaqcuire,...

CVE-2025-38373 IB/mlx5: Fix potential deadlock in MR deregistration

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix potential deadlock in MR deregistration The issue arises when kzalloc is invoked while holding umemmutex or any other lock acquired under umemmutex. This is problematic because kzalloc can trigger fsreclaimaqcuire,...

CVE-2025-38373

CVE-2025-38373 concerns the Linux kernel’s mlx5_ib MR deregistration deadlock. The description shows a flow where holding the mutex umem_mutex during dereg_mr() can lead kzalloc() to trigger reclaim paths (fs_reclaim, mmu_notifier_invalidate_range_start), which in turn calls mlx5_ib_invalidate_ra...

NewStart CGSL MAIN 7.02 : python-certifi Vulnerability (NS-SA-2025-0070)

The remote NewStart CGSL host, running version MAIN 7.02, has python-certifi packages installed that are affected by a vulnerability: - In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error This patch addresses a race...

CVE-2025-49072

Deserialization of Untrusted Data vulnerability in AncoraThemes Mr. Murphy mr-murphy allows Object Injection.This issue affects Mr. Murphy: from n/a through 1.2.12.1...

CVE-2025-49072

Deserialization of Untrusted Data vulnerability in AncoraThemes Mr. Murphy mr-murphy allows Object Injection.This issue affects Mr. Murphy: from n/a through 1.2.12.1...

CVE-2025-49072 WordPress Mr. Murphy < 1.2.12.1 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in AncoraThemes Mr. Murphy allows Object Injection.This issue affects Mr. Murphy: from n/a before 1.2.12.1...

CVE-2025-49072 WordPress Mr. Murphy < 1.2.12.1 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in AncoraThemes Mr. Murphy mr-murphy allows Object Injection.This issue affects Mr. Murphy: from n/a through 1.2.12.1...

CVE-2025-49072

CVE-2025-49072 describes a Deserialization of Untrusted Data vulnerability in the AncoraThemes Mr. Murphy WordPress theme. The issue allows PHP object injection and affects Mr. Murphy versions before 1.2.12.1 (earliest published reference lists vulnerability in Mr. Murphy with that version bound)...

PT-2025-24098 · Ancorathemes · Ancorathemes Mr. Murphy

Name of the Vulnerable Software and Affected Versions: AncoraThemes Mr. Murphy versions prior to 1.2.12.1 Description: The issue is related to Deserialization of Untrusted Data, allowing Object Injection. This can be exploited due to the deserialization of untrusted data, which enables an attacke...

WordPress Mr. Murphy < 1.2.12.1 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Tran Nguyen Bao Khanh in WordPress Theme Mr. Murphy versions 1.2.12.1...

CVE-2024-4433

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mr Digital Simple Image Popup allows Stored XSS.This issue affects Simple Image Popup: from n/a through 2.4.0...