RHSA-2025:14746 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

USN-7722-1 linux, linux-aws, linux-aws-6.14, linux-gcp, linux-hwe-6.14, linux-raspi, linux-realtime, linux-realtime-6.14 vulnerability

A security issues was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Network traffic control; CVE-2025-38350...

Ubuntu Pro 24.04 LTS Realtime Kernel : Linux kernel (Raspberry Pi Real-time) vulnerabilities (USN-7719-1)

The remote Ubuntu Pro 24.04 LTS Realtime Kernel host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7719-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This upda...

Linux Distros Unpatched Vulnerability : CVE-2022-39244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. In versions of PJSIP prior to 2.13 the PJSIP parser, PJMEDIA RTP decoder, and...

SUSE-SU-2025:02873-1 Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP7)

This update for the Linux Kernel 6.4.0-15070073 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hidhwrawrequest bsc1247350. - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID bsc1247351. -...

MAL-2025-28317 Malicious code in openai-realtime-console-plugin (npm)

The package openai-realtime-console-plugin was found to contain malicious code...

Malicious code in openai-realtime-console-plugin (npm)

The package openai-realtime-console-plugin was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2017-14340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The XFSISREALTIMEINODE macro in fs/xfs/xfslinux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local...

Linux Distros Unpatched Vulnerability : CVE-2016-3707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The icmpchecksysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22...

Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506001039 fixes several issues. The following security issue was fixed: CVE-2025-37752: netsched: schsfq: move the limit validation bsc1245776. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Ubuntu: Security Advisory (USN-7682-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in ably-realtime (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6070 Malicious code in ably-realtime (npm)

The package communicates with a domain associated with malicious activity...

Ubuntu Pro 24.04 LTS Realtime Kernel : Linux kernel (Real-time) vulnerabilities (USN-7652-1)

The remote Ubuntu Pro 24.04 LTS Realtime Kernel host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7652-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This upda...

Malicious code in realtime-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25e65ca84d64481a7631998dd140a2b8cecaa7b5716bb71dc08ff53e700a10aa The OpenSSF Package Analysis project identified 'realtime-demo' @...

Malicious code in realtime-next (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6123 Malicious code in realtime-next (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in realtime-client-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949f22e5098ca5aee7073d984f9abc9e0e2fa8624224f842af24e4548844dfd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506001023 fixes one issue. The following security issue was fixed: CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaS...

libvpx: Double-free in libvpx encoder

A flaw was found in libvpx. A double-free issue can occur in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This can cause memory corruption and an exploitable crash...