UBUNTU-CVE-2025-38576

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the same general nature: A second class of oops is als...

CVE-2025-38576 powerpc/eeh: Make EEH driver device hotplug safe

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the same general nature: A second class of oops is als...

Malicious code in shell-uglify-refactor-compile-cold (npm)

The package shell-uglify-refactor-compile-cold was found to contain malicious code...

MAL-2025-33084 Malicious code in shell-uglify-refactor-compile-cold (npm)

The package shell-uglify-refactor-compile-cold was found to contain malicious code...

MAL-2025-37580 Malicious code in uglify-debug-key-query-refactor (npm)

The package uglify-debug-key-query-refactor was found to contain malicious code...

MAL-2025-23218 Malicious code in info-export-double-refactor-table (npm)

The package info-export-double-refactor-table was found to contain malicious code...

Malicious code in reject-sun-wind-refactor-compress (npm)

The package reject-sun-wind-refactor-compress was found to contain malicious code...

Malicious code in uglify-debug-key-query-refactor (npm)

The package uglify-debug-key-query-refactor was found to contain malicious code...

MAL-2025-26217 Malicious code in meta-error-secure-encode-refactor (npm)

The package meta-error-secure-encode-refactor was found to contain malicious code...

MAL-2025-37244 Malicious code in try-refactor-yaml-decompress-phi (npm)

The package try-refactor-yaml-decompress-phi was found to contain malicious code...

Malicious code in nu-refactor-load-boolean-log (npm)

The package nu-refactor-load-boolean-log was found to contain malicious code...

MAL-2025-27877 Malicious code in nu-refactor-load-boolean-log (npm)

The package nu-refactor-load-boolean-log was found to contain malicious code...

LLM Coding Integrity Breach

Here's an interesting story about a failure being introduced by LLM-written code. Specifically, the LLM was doing some code refactoring, and when it moved a chunk of code from one file to another it changed a "break" to a "continue." That turned an error logging statement into an infinite loop,...

octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback

...

CVE-2025-38306

In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of haslockedchildren maydecodefh is calling haslockedchildren while holding no locks. That's an oopsable race... The rest of the callers are safe since they are holding namespacesem and are...

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: Update to version 20250416.02 bsc1244304, bsc1244503 defaultSleeper: tolerate 10% difference to reduce test flakiness Add output of some packagemanagers to the testdata from version 20250416.01 Refactor OS Info package from version...

CVE-2025-38014

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Refactor remove call with idxdcleanup helper The idxdcleanup helper cleans up perfmon, interrupts, internals and so on. Refactor remove call with the idxdcleanup helper to avoid code duplication. Note, this also...

DEBIAN-CVE-2025-38014

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Refactor remove call with idxdcleanup helper The idxdcleanup helper cleans up perfmon, interrupts, internals and so on. Refactor remove call with the idxdcleanup helper to avoid code duplication. Note, this also...

CVE-2025-38014

CVE-2025-38014 : In the Linux kernel’s dmaengine idxd subsystem, a removal path was refactored to use an idxd_cleanup() helper, which fixes code duplication and also corrects a missing put_device() for idxd groups, engines, and work queues. The vulnerability is described as a local-access issue w...

CVE-2025-38014 dmaengine: idxd: Refactor remove call with idxd_cleanup() helper

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Refactor remove call with idxdcleanup helper The idxdcleanup helper cleans up perfmon, interrupts, internals and so on. Refactor remove call with the idxdcleanup helper to avoid code duplication. Note, this also...