kernel: net: let net.core.dev_weight always be non-zero

In the Linux kernel, the following vulnerability has been resolved: net: let net.core.devweight always be non-zero The following problem was encountered during stability test: NULL netdevice: NAPI poll function processbacklog+0x0/0x530 \ returned 1, exceeding its budget of 0. ------------ cut her...

kernel: ipv6: use RCU protection in ip6_default_advmss()

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6defaultadvmss ip6defaultadvmss needs rcu protection to make sure the net structure it reads does not disappear...

kernel: RDMA/core: Don't expose hw_counters outside of init net namespace

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Don't expose hwcounters outside of init net namespace Commit 467f432a521a "RDMA/core: Split port and device counter sysfs attributes" accidentally almost exposed hw counters to non-init net namespaces. It didn't expose...

kernel: net/sched: cls_api: fix error handling causing NULL dereference

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference tcfextsmisscookiebasealloc calls xaalloccyclic which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to...

kernel: openvswitch: use RCU protection in ovs_vport_cmd_fill_info()

In the Linux kernel, the following vulnerability has been resolved: openvswitch: use RCU protection in ovsvportcmdfillinfo ovsvportcmdfillinfo can be called without RTNL or RCU. Use RCU protection and devnetrcu to avoid potential UAF...

kernel: tcp: drop secpath at the same time as we currently drop dst

In the Linux kernel, the following vulnerability has been resolved: tcp: drop secpath at the same time as we currently drop dst Xiumei reported hitting the WARN in xfrm6tunnelnetexit while running tests that boil down to: - create a pair of netns - run a basic TCP test over ipcomp6 - delete the...

EUVD-2025-76199

Malicious code in nettarantula-appteadev npm...

EUVD-2025-78716

Malicious code in netleechz3n npm...

EUVD-2025-81106

Malicious code in netmeadowlarkdumbs npm...

Malicious code in net_meadowlark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef336bb70f20ea168e77263f613a129533bac6b6b3b935d7f80b8b92cea05e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-68879

Malicious code in netmammalz3n npm...

EUVD-2025-62916

Malicious code in netweaselz3n npm...

MAL-2025-95636 Malicious code in net_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fd8d2e41dbe0f91abd34bc580b138740d771cf023191ff4e4d918cb5ff195c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53045

Malicious code in net-coral-fly npm...

EUVD-2025-53044

Malicious code in net-gray-bison npm...

Malicious code in net-amaranth-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2daca6978b7e6c465d886eb32e5e0c828e5b6b47b9d8bfb2f098e546f813467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53046

Malicious code in net-black-gull npm...

MAL-2025-69605 Malicious code in net-gray-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207d197632e8546f7623e57c730878ac33c936aa5144bb8dec19af81652339d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net-coral-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28b3d1ab17c5f22604fe8c444832ae91aaaf8beb908875d108d1d0aab06776e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net-gray-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207d197632e8546f7623e57c730878ac33c936aa5144bb8dec19af81652339d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...