Malicious code in @azure-tests/perf-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90108fb1a0ccfeb0b3a7ed413189982b1a936052f4af6f004793f81040b67e8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-100 Malicious code in @azure-tests/perf-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90108fb1a0ccfeb0b3a7ed413189982b1a936052f4af6f004793f81040b67e8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-104 Malicious code in @azure-tests/perf-keyvault-certificates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a25dc4068b608b772eecbeda0f61b9fdc2db99958e7ed44bb311e99ff4083afb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e70f370bad16f5c5f3b53ac78af981f9d14f1ebb6551b8bd8fda11f91a5171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-103 Malicious code in @azure-tests/perf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58c31e90a2d18fa00fa8667905444ac65828ede2b1cf6db09888804b7b191cd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-110 Malicious code in @azure-tests/perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e70f370bad16f5c5f3b53ac78af981f9d14f1ebb6551b8bd8fda11f91a5171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-search-documents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f2237723a6fdf9b67623ef054f822f99d0e07663d04182ba616f88121f800b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-ai-metrics-advisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4481907e4576323ba08381ebe46ec41756c662cf0c943c4174795e2275ca8a4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-event-hubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf588fbf5bf27b08f8c1ced6e2138964f152391cbb87befbe11b1d4cec4f0d47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-monitor-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d981d0c3bc3f93b7f2392e2029a93af9784e57dcdc6043ac18ff97dac615b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-107 Malicious code in @azure-tests/perf-monitor-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d981d0c3bc3f93b7f2392e2029a93af9784e57dcdc6043ac18ff97dac615b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-113 Malicious code in @azure-tests/perf-storage-file-datalake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 468efce3e19be8c294f0928d529c70943981b9cac451ea153487ee1fb90ace49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-111 Malicious code in @azure-tests/perf-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98c435c2b1738c33dab5842fd1b25457f25c0537f25ae2b5b59ced164335686b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5280 Malicious code in perf-core-rest-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38c2c294b78552bae3263b495da7be1eda10abd3df85368d506e29835f8e507 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-core-rest-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38c2c294b78552bae3263b495da7be1eda10abd3df85368d506e29835f8e507 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local...

The vulnerability of the `sys_perf_event_open()` function in the Linux operating system’s perf subsystem allows a local attacker to gain root privileges.

The vulnerability of the sysperfeventopen function in the Linux operating system’s perf subsystem stems from the race condition within this subsystem. This condition can be exploited to initiate access to a freed memory area in the kernel. Exploiting this vulnerability allows a local attacker to...

Unbreakable Enterprise kernel security update

5.4.17-2136.307.3.2 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34172709 CVE-2022-1729...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable to a contention problem that originates from a contention problem in the perfeventopen function, which can be exploited by local attackers to elevate privileges...