Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a register access error that could cause the kernel to crash...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990827 advisory. In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registe...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990787)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990787 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix wild-memory-access in registersynthevent In registersynthevent, if...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990785 advisory. In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDNdspelementregister Afer commit 1fa5ae857bb1 driver core:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990790 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix error handling in enainit The enainit won't destroy workqueue created by...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990813 advisory. In the Linux kernel, the following vulnerability has been resolved: siox: fix possible memory leak in sioxdeviceadd If deviceregister returns error in sioxdeviceadd,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990795 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus If deviceregister fails in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an MSR access error that could result in a register write failure...

Malicious code in riana-tempe16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4b9dd5c2b2567f40f1a3a8fb8684c428915e324f6c36e0eae8140d44dcfbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: acpi: typec: ucsi: Introduce a ->poll_cci method

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

kernel: idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

kernel: acpi: typec: ucsi: Introduce a ->poll_cci method

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

kernel: fbdev: hyperv_fb: Allow graceful removal of framebuffer

In the Linux kernel, the following vulnerability has been resolved: fbdev: hypervfb: Allow graceful removal of framebuffer When a Hyper-V framebuffer device is unbind, hypervfb driver tries to release the framebuffer forcefully. If this framebuffer is in use it produce the following WARN and henc...

kernel: idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

MAL-2025-106173 Malicious code in nana-sroto20-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dcb0964880bb9d5a41c595c4ea2d9157bce2322043045658eeb67c685025245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84795 Malicious code in dono-toge69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ab9eabd768327170436a5a5d45dffe5490aebc42c9a155e89317579084bcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90752 Malicious code in steep_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e2e41c0c52af0c4c335368dfc71d3b493fe20a9da6c128edea79fcec0e2a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69439 Malicious code in misty-purple-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9bf7c6a1772970d1726a021ffca4b464e754a1c77f7ba18f0370a35c68723a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-59716

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/email/token endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail address corresponds to a valid pending guest user...

CVE-2025-12677

The KiotViet Sync plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the registerapiroute function in kiotvietsync/includes/publicactions/WebHookAction.php. This makes it possible for unauthenticated attackers to extract the webhoo...