MiracleLinux 4 : kernel-2.6.32-279.AXS4 (AXSA:2012-749:06)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-749:06 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

EUVD-2009-2292

Malware in sbrugna...

EUVD-2009-2483

Malware in sbrugna...

EUVD-2011-4079

Malware in sbrugna...

EUVD-2012-2365

Malware in sbrugna...

EUVD-2017-17998

Malware in sbrugna...

EUVD-2015-2672

Malware in sbrugna...

EUVD-2009-3269

Malware in sbrugna...

EUVD-2022-54811

Malicious code in bioql PyPI...

EUVD-2025-22610

Malicious code in bioql PyPI...

EUVD-2025-9421

Malicious code in bioql PyPI...

CVE-2025-38393

CVE-2025-38393 is a Linux kernel race condition in NFSv4/pNFS wake logic for NFS_LAYOUT_DRAIN in pnfs_update_layout(). The issue occurs when a waiter and waker race, causing writeback/page lock hang; a barrier-based fix is applied. Public advisories/DB entries confirm the fix across multiple kern...

CVE-2022-50072

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then we must not try to free either the open slot or the layoutget operation arguments, since they are likely still in use by the hung RPC call...

CVE-2022-50072

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then we must not try to free either the open slot or the layoutget operation arguments, since they are likely still in use by the hung RPC call...

CVE-2025-21900

CVE-2025-21900 : In the Linux kernel, a deadlock can occur in NFSv4 state recovery for a sillyrenamed file scheduled for delete-on-close, when a server reboot triggers an open reclaim and races with close(). The root cause is a synchronous delegreturn call from put_nfs_open_context() that isn’t m...

CVE-2022-49418

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4label on referral lookup. Send along the already-allocated fattr along with nfs4fslocations, and drop the memcpy of fattr. We end up growing two more allocations, but this fixes up a crash as:...

CVE-2022-49316

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Don't hold the layoutget locks across multiple RPC calls When doing layoutget as part of the open compound, we have to be careful to release the layout locks before we can call any further RPC calls, such as setattr. The...

CVE-2022-49418

The CVE-2022-49418 entry concerns a Linux kernel NFSv4 crash during referral lookup caused by using an uninitialized nfs4_label. The fix, as described in the provided documents, sends along the already-allocated fattr with nfs4_fs_locations and drops the memcpy of fattr, which avoids two extra al...

CVE-2022-49418 NFSv4: Fix free of uninitialized nfs4_label on referral lookup.

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4label on referral lookup. Send along the already-allocated fattr along with nfs4fslocations, and drop the memcpy of fattr. We end up growing two more allocations, but this fixes up a crash as:...

CVE-2022-49418 NFSv4: Fix free of uninitialized nfs4_label on referral lookup.

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4label on referral lookup. Send along the already-allocated fattr along with nfs4fslocations, and drop the memcpy of fattr. We end up growing two more allocations, but this fixes up a crash as:...