211 matches found
PT-2025-49638
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the accel/qaic component related to integer overflow checking within the map user pages function. The encode dma function previously had validation on...
Malicious code in flatten-unflatten (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96678bbed20be5d500dc65bda769b41f7d3666a18c8a76262aca5ed79ef584fd The package flatten-unflatten was found to contain malicious code. Source: ghsa-malware...
accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
...
EUVD-2025-124911
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Treat remaining == 0 as error in findandmapuserpages Currently, if findandmapuserpages takes a DMA xfer request from the user with a length field set to 0, or in a rare case, the host receives QAICTRANSDMAXFERCONT fro...
CVE-2025-40172 accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Treat remaining == 0 as error in findandmapuserpages Currently, if findandmapuserpages takes a DMA xfer request from the user with a length field set to 0, or in a rare case, the host receives QAICTRANSDMAXFERCONT fro...
CVE-2025-40126
CVE-2025-40126 affects the Linux kernel (sparc/UltraSPARC) where a faulty exception handling path in copy_from_user and copy_to_user could affect the return value in faulting scenarios. The referenced commit added exception handlers for user-space memory references and incorrectly calculated the ...
CVE-2025-40126 sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copyfromtouser for UltraSPARC The referenced commit introduced exception handlers on user-space memory references in copyfromuser and copytouser. These handlers return from the respectiv...
CVE-2025-40124 sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copyfromtouser for UltraSPARC III Anthony Yznaga tracked down that a BUGON in ext4 code with large folios enabled resulted from copyfromuser returning impossibly large values greater tha...
Malicious code in remaining_crocodile_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e026f2d40b4ff92b02acf1f9151add1ad9b53404446d869faab7ff86036c22b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-136553 Malicious code in remaining_crocodile_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e026f2d40b4ff92b02acf1f9151add1ad9b53404446d869faab7ff86036c22b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in remaining_parrotfish-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b913b3a3307dc3e9d022dbcecd34b5f4883bb6ea0ef29c3090666a7fccafc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75829
Malicious code in remainingparrotfish-tool npm...
EUVD-2025-75830
Malicious code in remainingdragon-silentdev npm...
EUVD-2025-68293
Malicious code in remainingbarracudaz3n npm...
EUVD-2025-74003
Malicious code in remainingraccoonz3n npm...
EUVD-2025-52337
Malicious code in remaining-coral-peafowl npm...
Malicious code in remaining-coral-peafowl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11bea5fc0aafa4e9c7803793f3e84ad9eea234a53e0dd3937562de6087e4e6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in remaining-cyan-kiwi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87895d93af91085c3d8940ca4c9cf5771d7a8dec672aafa47b2ab431be0f58df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...