CVE-2025-38732 netfilter: nf_reject: don't leak dst refcount for loopback packets

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfreject: don't leak dst refcount for loopback packets recent patches to add a WARN when replacing skb dst entry found an old bug: WARNING: include/linux/skbuff.h:1165 skbdstcheckunset include/linux/skbuff.h:1164 inlin...

scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT

...

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.

...

Linux Distros Unpatched Vulnerability : CVE-2023-22466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tokio is a runtime for writing applications with Rust. Starting with version 1.7.0 and prior to versions 1.18.4, 1.20.3, and 1.23.1, when configuring a Windows...

CVE-2025-38665

In the Linux kernel, the following vulnerability has been resolved: can: netlink: canchangelink: fix NULL pointer deref of struct canpriv::dosetmode Andrei Lalaev reported a NULL pointer deref when a CAN device is restarted from Bus Off and the driver does not implement the struct...

Linux Distros Unpatched Vulnerability : CVE-2023-26136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in...

Malicious code in thread-reject-runtime-quick-rain (npm)

The package thread-reject-runtime-quick-rain was found to contain malicious code...

Malicious code in fast-bash-tree-reject-omicron (npm)

The package fast-bash-tree-reject-omicron was found to contain malicious code...

MAL-2025-16424 Malicious code in cache-table-cloud-encrypt-reject (npm)

The package cache-table-cloud-encrypt-reject was found to contain malicious code...

MAL-2025-32890 Malicious code in sed-simple-sandbox-reject-zero (npm)

The package sed-simple-sandbox-reject-zero was found to contain malicious code...

MAL-2025-32042 Malicious code in reject-sun-wind-refactor-compress (npm)

The package reject-sun-wind-refactor-compress was found to contain malicious code...

MAL-2025-33235 Malicious code in signal-slow-reject-easy-object (npm)

The package signal-slow-reject-easy-object was found to contain malicious code...

MAL-2025-32039 Malicious code in reject-eta-xi-wind-query (npm)

The package reject-eta-xi-wind-query was found to contain malicious code...

Malicious code in reject-uglify-phi-xml-quick (npm)

The package reject-uglify-phi-xml-quick was found to contain malicious code...

Malicious code in reject-sun-wind-refactor-compress (npm)

The package reject-sun-wind-refactor-compress was found to contain malicious code...

Malicious code in secure-sandbox-validate-public-reject (npm)

The package secure-sandbox-validate-public-reject was found to contain malicious code...

Malicious code in reject-stub-nu-long-delta (npm)

The package reject-stub-nu-long-delta was found to contain malicious code...

Malicious code in sigma-reject-mock-try-simulate (npm)

The package sigma-reject-mock-try-simulate was found to contain malicious code...

Malicious code in eta-reject-fork-char-cat (npm)

The package eta-reject-fork-char-cat was found to contain malicious code...

Malicious code in zeta-node-alpha-link-reject (npm)

The package zeta-node-alpha-link-reject was found to contain malicious code...