EUVD-2025-5864

Malicious code in bioql PyPI...

EUVD-2022-55320

Malicious code in bioql PyPI...

EUVD-2023-12345

Malicious code in bioql PyPI...

EUVD-2022-54938

Malicious code in bioql PyPI...

EUVD-2023-38431

Malicious code in bioql PyPI...

EUVD-2023-37299

Malicious code in bioql PyPI...

EUVD-2024-19430

Malicious code in bioql PyPI...

EUVD-2022-27234

Malicious code in bioql PyPI...

EUVD-2022-54935

Malicious code in bioql PyPI...

EUVD-2022-54954

Malicious code in bioql PyPI...

EUVD-2022-54934

Malicious code in bioql PyPI...

SUSE CVE-2025-39892

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: care NULL dirver name on sndsoclookupcomponentnolocked soc-generic-dmaengine-pcm.c uses same dev for both CPU and Platform. In such case, CPU component driver might not have driver-name, then...

Medium: mpg123

Issue Overview: An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to...

Amazon Linux 2 : mpg123, --advisory ALAS2-2025-2997 (ALAS-2025-2997)

The version of mpg123 installed on the remote host is prior to 1.32.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2997 advisory. An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the...

PT-2025-46617

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ALSA PCM subsystem related to interrupt handling on PREEMPT RT systems. Specifically, snd pcm group lock irq acquires a spinlock, disabling...

ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()

...

DEBIAN-CVE-2025-38706

In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in sndsocremovepcmruntime sndsocremovepcmruntime might be called with rtd == NULL which will leads to null pointer dereference. This was reproduced with topology loading and marking a link as...

AZL-75161 CVE-2025-38706 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in sndsocremovepcmruntime sndsocremovepcmruntime might be called with rtd == NULL which will leads to null pointer dereference. This was reproduced with topology loading and marking a link as...

Linux Distros Unpatched Vulnerability : CVE-2024-10573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer...

USN-7704-5 linux-gke, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...