USN-7703-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - GPIO subsystem; - GPU...

Announcing Nmap 7.95 Upgrade and More Accurate Simple Network Management Protocol (SNMP) Fingerprinting

At Rapid7, our commitment is to provide you with the most accurate and reliable scan data possible; as such, we are continuously updating our underlying technology. Today we are excited to announce an upcoming enhancement to the InsightVM scan engine, aimed at improving the accuracy of Simple...

Linux Distros Unpatched Vulnerability : CVE-2021-38507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Opportunistic Encryption feature of HTTP2 RFC 8164 allows a connection to be transparently upgraded to TLS while retaining the visual properties of an HTTP...

Malicious code in @zalastax/nolb-illust-93 (npm)

The package @zalastax/nolb-illust-93 was found to contain malicious code...

Malicious code in snapchat-followers-free-90-day-trial201 (npm)

The package snapchat-followers-free-90-day-trial201 was found to contain malicious code...

MAL-2025-33501 Malicious code in snapchat-followers-free-90-day-trial201 (npm)

The package snapchat-followers-free-90-day-trial201 was found to contain malicious code...

MAL-2025-12009 Malicious code in @zalastax/nolb-illust-93 (npm)

The package @zalastax/nolb-illust-93 was found to contain malicious code...

Inside Grammarly’s AI-driven automation with the MCP Server for Wiz

Meet the system that cut manual triage times by 90% and enables engineers to focus on strategic thinking...

Linux Distros Unpatched Vulnerability : CVE-2021-38491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerability affects Firefox 92. CVE-2021-38491...

Linux Distros Unpatched Vulnerability : CVE-2021-29975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of anothe...

Linux Distros Unpatched Vulnerability : CVE-2021-29987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a different position but still...

Linux Distros Unpatched Vulnerability : CVE-2021-29977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corruption and we presume that with enough...

CVE-2025-38225 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38225 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38345 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38345 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38300 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38300 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38251 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38251 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

AZL-64928 CVE-2025-38347 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on ino and xnid syzbot reported a f2fs bug as below: INFO: task syz-executor140:5308 blocked for more than 143 seconds. Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 0 "echo 0...

UBUNTU-CVE-2025-38093

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: x1e80100: Add GPU cooling Unlike the CPU, the GPU does not throttle its speed automatically when it reaches high temperatures. With certain high GPU loads it is possible to reach the critical hardware shutdown...

CVE-2025-5072

Resource leak vulnerability in ASR180x、ASR190x in conmgr allows Resource Leak Exposure.This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2022-50191

CVE-2022-50191 affects the Linux kernel regulator subsystem (of:), describing a refcount leak in the handling of of_get_regulation_constraints(). The remedy is a fixed lifecycle management: call of_node_put() on the reference returned by of_get_child_by_name() which had its refcount increased. Co...