Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Error handling in gicpopulateppipartitions was fixed. The function ofgetchildbyname returns a node pointer with a refcount incremented. We should use ofnodeput on it when it is no longer needed. When kcalloc fails...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: irqchip/gic-v3: A refcount leak was fixed in gicpopulateppipartitions. The offindnodebyphandle function returns a node pointer with a incremented refcount. We should use ofnodeput on it when there is no longer a need for it. A...

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit in AI tools, exposed services, old bugs, weak logins, and software sold like a monthly subscription. Some attacks use new tricks. Others just reuse what was already lyin...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989630)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989630 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix refcount leak in gicpopulateppipartitions offindnodebyphandle returns a node...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988807 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix error handling in gicpopulateppipartitions ofgetchildbyname returns a node...

EUVD-2015-8618

Malware in sbrugna...

USN-7651-6 linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

DEBIAN-CVE-2022-49715

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix refcount leak in gicpopulateppipartitions offindnodebyphandle returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from gic-v3 not properly handling node reference counting when populating PPI partitions, which could lead to a...

PT-2025-8649

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to error handling in gic populate ppi partitions. The of get child by name function returns a node pointer with an incremented...

Water Orthrus Targets Chinese Users with CopperStealth and CopperPhish

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Water Orthrus has recently launched two new campaigns, CopperStealth and CopperPhish, where CopperStealth employs rootkit techniques, while CopperPhish globally distributes a phishing kit through PPI...

SUSE CVE-2015-8741

The dissectppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

PrivateLoader PPI Service Found Distributing Info-Stealing RisePro Malware

The pay-per-install PPI malware downloader service known as PrivateLoader is being used to distribute a previously documented information-stealing malware dubbed RisePro. Flashpoint spotted the newly identified stealer on December 13, 2022, after it discovered "several sets of logs" exfiltrated...

GSD-2022-1004839 irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions

irqchip/gic-v3: Fix refcount leak in gicpopulateppipartitions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.249 by commit...

PT-2022-32760

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description The issue concerns error handling in gic populate ppi partitions. It was introduced in version v5.4 and fixed in Linux Kernel version v5.15.49. The actual impact and attack plausibility have...

PT-2022-33020

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.200 Description The issue is related to a refcount leak in the gic populate ppi partitions function. It was introduced in version v4.7 and fixed in Linux Kernel version v5.4.200. The actual impact and attack...

PT-2022-32910

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.10.123 Description The issue concerns error handling in gic populate ppi partitions. It was introduced in version v5.4 and fixed in version v5.10.124. The actual impact and attack plausibility have not yet...

PT-2022-32909

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.7 through 5.10.123 Description A refcount leak was discovered in the gic populate ppi partitions function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4....

PT-2022-32759

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.7 through 5.15.48 Description The issue is related to a refcount leak in the gic populate ppi partitions function. It was introduced in version 4.7 and fixed in version 5.15.49. The actual impact and attack plausibility...

PT-2022-33101

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.249 Description The issue is related to a refcount leak in the gic populate ppi partitions function. It was introduced in version v4.7 and fixed in version v4.19.249. The actual impact and attack plausibili...