MAL-2025-20587 Malicious code in firebase-queue-client (npm)

The package firebase-queue-client was found to contain malicious code...

Malicious code in csp-daemon-notifications-queue (npm)

The package csp-daemon-notifications-queue was found to contain malicious code...

Malicious code in checkout_queue (npm)

The package checkoutqueue was found to contain malicious code...

MAL-2025-17011 Malicious code in ci-queue (npm)

The package ci-queue was found to contain malicious code...

MAL-2025-27164 Malicious code in nebula-firebase-queue (npm)

The package nebula-firebase-queue was found to contain malicious code...

MAL-2025-31291 Malicious code in queue-firebase (npm)

The package queue-firebase was found to contain malicious code...

Malicious code in firebase-queue-client (npm)

The package firebase-queue-client was found to contain malicious code...

kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfscchangeclass when...

kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()

In the Linux kernel, the following vulnerability has been resolved: misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram struct vmcieventqp allocated by qpnotifypeer contains padding, which may carry uninitialized data to the userspace, as observed by KMSAN: BUG: KMSAN: kernel-infoleak in...

Linux Distros Unpatched Vulnerability : CVE-2025-38350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs...

Linux Distros Unpatched Vulnerability : CVE-2021-47598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: schcake: do not call cakedestroy from cakeinit qdiscs are not supposed to call their own...

Linux Distros Unpatched Vulnerability : CVE-2023-52768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: use vmmtable as array in wilc struct Enabling KASAN and running some iperf...

PT-2025-35990

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition was identified in the kcm unattach function within the kernel's networking subsystem. Specifically, the function lacked a check of the kcm-tx stopped flag before calling...

PT-2025-35957

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-116.el10.x86 64 Description A flaw was discovered in the Linux kernel's sch ets module related to the handling of queue bands during the purging of unused classes. Specifically, the code used an outdated...

Linux Distros Unpatched Vulnerability : CVE-2023-52644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled When QoS is disabled, the queue priority value will not map to the correct ieee80211 queu...

Linux Distros Unpatched Vulnerability : CVE-2025-37797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free...

Linux Distros Unpatched Vulnerability : CVE-2022-49901

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-mq: Fix kmemleak in blkmqinitallocatedqueue There is a kmemleak caused by modprobe nullblk.ko unreferenced object 0xffff8881acb1f000 size 1024: comm...

Linux Distros Unpatched Vulnerability : CVE-2025-22118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ice: validate queue quanta parameters to prevent OOB access Add queue wraparound prevention ...

Linux Distros Unpatched Vulnerability : CVE-2022-50003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ice: xsk: prohibit usage of non- balanced queue id Fix the following scenario: 1. ethtool -L...

Linux Distros Unpatched Vulnerability : CVE-2023-52774

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/dasd: protect device queue against concurrent access In dasdprofilestart the amount of requests on the device queue are counted. The access to the device...