Oracle Linux 10 : kernel (ELSA-2025-13598)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-13598 advisory. - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds - CVE-2025-38159 - Revert 'smb: client: fix TCP timers deadlock after rmmod'...

Linux Distros Unpatched Vulnerability : CVE-2025-38035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: don't restore null skstatechange queue-statechange is set as part of nvmettcpsetqueuesock, but if the TCP connection isn't established when...

Malicious code in ci-queue (npm)

The package ci-queue was found to contain malicious code...

MAL-2025-13514 Malicious code in @zalastax/nolb-que- (npm)

The package @zalastax/nolb-que- was found to contain malicious code...

Malicious code in checkout_queue (npm)

The package checkoutqueue was found to contain malicious code...

Malicious code in nebula-firebase-queue (npm)

The package nebula-firebase-queue was found to contain malicious code...

Malicious code in csp-daemon-notifications-queue (npm)

The package csp-daemon-notifications-queue was found to contain malicious code...

MAL-2025-31290 Malicious code in queue-consumer-cg (npm)

The package queue-consumer-cg was found to contain malicious code...

MAL-2025-17782 Malicious code in csp-daemon-notifications-queue (npm)

The package csp-daemon-notifications-queue was found to contain malicious code...

Malicious code in queue-consumer-cg (npm)

The package queue-consumer-cg was found to contain malicious code...

Malicious code in queue-firebase (npm)

The package queue-firebase was found to contain malicious code...

MAL-2025-27164 Malicious code in nebula-firebase-queue (npm)

The package nebula-firebase-queue was found to contain malicious code...

MAL-2025-17011 Malicious code in ci-queue (npm)

The package ci-queue was found to contain malicious code...

MAL-2025-20587 Malicious code in firebase-queue-client (npm)

The package firebase-queue-client was found to contain malicious code...

MAL-2025-31291 Malicious code in queue-firebase (npm)

The package queue-firebase was found to contain malicious code...

Malicious code in firebase-queue-client (npm)

The package firebase-queue-client was found to contain malicious code...

kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfscchangeclass when...

kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()

In the Linux kernel, the following vulnerability has been resolved: misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram struct vmcieventqp allocated by qpnotifypeer contains padding, which may carry uninitialized data to the userspace, as observed by KMSAN: BUG: KMSAN: kernel-infoleak in...

Oracle Universal Work Queue Unauthorized Access

The vulnerability of the application’s request handling component for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

Linux DisplayPort Alt Mode Driver Heap Buffer Overflow DoS

The vulnerability of the tcpmqueuevdmunlocked function in the DisplayPort Alt Mode Driver component of the Linux operating system is related to mutual locking of execution threads. Exploiting this vulnerability could allow an attacker to cause a service failure...