CVE-2026-23009 xhci: sideband: don't dereference freed ring when removing sideband endpoint

In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: don't dereference freed ring when removing sideband endpoint xhcisidebandremoveendpoint incorrecly assumes that the endpoint is running and has a valid transfer ring. Lianqin reported a crash during suspend/wake-u...

EUVD-2026-4630

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5epriv in mlx5edev devlink priv mlx5epriv is an unstable structure that can be memset0 if profile attaching fails, mlx5epriv in mlx5edev devlink private is used to reference the netdev and mdev associate...

SUSE CVE-2025-71149

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Malicious code in overstock-jenkins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8c5441a7b9b1ad7193650b05275dc85626691e1fa1f04bb0f21783fa75673c The package overstock-jenkins was found to contain malicious code. Source: ghsa-malware...

MAL-2026-515 Malicious code in overstock-jenkins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8c5441a7b9b1ad7193650b05275dc85626691e1fa1f04bb0f21783fa75673c The package overstock-jenkins was found to contain malicious code. Source: ghsa-malware...

Malicious code in overstock-health-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88927f419aeeb8999fb1b8be70403f14230ba9189e1bde2179b717f55c8c3217 The package overstock-health-express was found to contain malicious code. Source: ghsa-malware...

MAL-2026-514 Malicious code in overstock-health-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88927f419aeeb8999fb1b8be70403f14230ba9189e1bde2179b717f55c8c3217 The package overstock-health-express was found to contain malicious code. Source: ghsa-malware...

CVE-2025-71149

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

AZL-75147 CVE-2025-71149 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: correctly handle iopolladd return value on update When the core of iouring was updated to handle completions consistently and with fixed return codes, the POLLREMOVE opcode with updates got slightly broken. If a...

CVE-2025-71149

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

UBUNTU-CVE-2025-71149

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-71149

...

CVE-2025-71149

CVE-2025-71149 is reported in multiple advisories as a Linux kernel io_uring/poll issue. The root cause is incorrect handling of the return value from io_poll_add() during updates, which can affect completion/event signaling (CQEs) for POLL_ADD/POLL_REMOVE scenarios. Affected advisories reference...

CVE-2025-71149 io_uring/poll: correctly handle io_poll_add() return value on update

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: correctly handle iopolladd return value on update When the core of iouring was updated to handle completions consistently and with fixed return codes, the POLLREMOVE opcode with updates got slightly broken. If a...

CVE-2025-71149

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Malicious code in a5xm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59318b8cded3eb39d4e5d1cf0e5320f1a6642ee9cf10efada20f75811ca117a2 The package a5xm was found to contain malicious code. Source: ghsa-malware af04e818925f6a7dfdce51341c120a1afe18e57ef12daa899e5246aafd56297f Any...

Malicious code in ntwsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101f5ffdce019ee61ce0775bc9de5dba96de50e5e03e8fd70ac1b30b28cf13e0 The package ntwsc was found to contain malicious code. Source: ghsa-malware ef0dd5d822ddc7c0a00339f31b43d1a99cf79532857cdd157bf1eeb4b2a31ea2 Any...

MAL-2026-486 Malicious code in a5xm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59318b8cded3eb39d4e5d1cf0e5320f1a6642ee9cf10efada20f75811ca117a2 The package a5xm was found to contain malicious code. Source: ghsa-malware af04e818925f6a7dfdce51341c120a1afe18e57ef12daa899e5246aafd56297f Any...

MAL-2026-487 Malicious code in ntwsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101f5ffdce019ee61ce0775bc9de5dba96de50e5e03e8fd70ac1b30b28cf13e0 The package ntwsc was found to contain malicious code. Source: ghsa-malware ef0dd5d822ddc7c0a00339f31b43d1a99cf79532857cdd157bf1eeb4b2a31ea2 Any...

MAL-2026-485 Malicious code in a4wu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f0ae226eb7aef794335d5c42f8f82348461976fcd5188fdb74129e54e36f5a The package a4wu was found to contain malicious code. Source: ghsa-malware dbda459fa895bbd7a94bd12494e3092b3964f21d8a480826313bdb3f7302904b Any...