CVE-2025-68213

CVE-2025-68213: Linux kernel idpf driver vulnerability where remove() may dereference a NULL vport_config if vport initialization failed, causing a kernel crash during device removal. Mitigation implemented by adding a NULL pointer check for vport_config[i] before freeing user_config.q_coalesce. ...

CVE-2025-68213 idpf: fix possible vport_config NULL pointer deref in remove

In the Linux kernel, the following vulnerability has been resolved: idpf: fix possible vportconfig NULL pointer deref in remove Attempting to remove the driver will cause a crash in cases where the vport failed to initialize. Following trace is from an instance where the driver failed during an...

CVE-2025-68182 wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix potential use after free in iwlmldremovelink This code frees "link" by calling kfreerculink, rcuhead and then it dereferences "link" to get the "link-fwid". Save the "link-fwid" first to avoid a potential use...

CVE-2025-68182 wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix potential use after free in iwlmldremovelink This code frees "link" by calling kfreerculink, rcuhead and then it dereferences "link" to get the "link-fwid". Save the "link-fwid" first to avoid a potential use...

CVE-2025-68182

CVE-2025-68182 describes a use-after-free in the Intel iwlwifi MLD path of the Linux kernel. In iwl_mld_remove_link(), the code frees link via kfree_rcu(link, rcu_head) and then dereferences link to read link->fw_id. The fix is to save link->fw_id before freeing the object, preventing use-a...

CVE-2025-68181

Technical details for CVE-2025-68181 are not publicly available in the provided documents. Monitor for updates.

CVE-2025-68181 drm/radeon: Remove calls to drm_put_dev()

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drmputdev Since the allocation of the drivers main structure was changed to devmdrmdevalloc drmputdev'ing to trigger it to be free'd should be done by devres. However, drmputdev is still in the probe...

CVE-2025-68172 crypto: aspeed - fix double free caused by devm

In the Linux kernel, the following vulnerability has been resolved: crypto: aspeed - fix double free caused by devm The clock obtained via devmclkgetenabled is automatically managed by devres and will be disabled and freed on driver detach. Manually calling clkdisableunprepare in error path and...

CVE-2025-68172 crypto: aspeed - fix double free caused by devm

In the Linux kernel, the following vulnerability has been resolved: crypto: aspeed - fix double free caused by devm The clock obtained via devmclkgetenabled is automatically managed by devres and will be disabled and freed on driver detach. Manually calling clkdisableunprepare in error path and...

MAL-2025-192600 Malicious code in tailwind-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a9b7a9c02e83e0b4145dc9caaa9d04b407a199ae5d54b9f544f91397980966 The package tailwind-variables was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192599 Malicious code in tailwind-stylecss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c71a662da2f505a840efadd0fae8fc82d44fe869c688fc1a5f4b7bf4d0a517 The package tailwind-stylecss was found to contain malicious code. Source: ghsa-malware...

Malicious code in example-vue2-micro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cda06e9583d6e3b61afb6f1134f4d867559022d5844de0fbb5781312b8d5abc The package example-vue2-micro was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192593 Malicious code in openhands-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3094854e6f43f64c218e6ccdf21f319cff916fef4a412442faccf4b9cd616fe9 The package openhands-frontend was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192590 Malicious code in example-vue2-micro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cda06e9583d6e3b61afb6f1134f4d867559022d5844de0fbb5781312b8d5abc The package example-vue2-micro was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview nad-home is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2025-192591 Malicious code in i18never (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632dc2988c33d66794e0a132a9b305b8ea29788a777889291647e5a0514d51b2 The package i18never was found to contain malicious code. Source: ghsa-malware f8457dd91952dfd151549c2a5de56ff988a48ae31ebd0eae188e8a62999cb040 Any...

Malicious code in i18never (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632dc2988c33d66794e0a132a9b305b8ea29788a777889291647e5a0514d51b2 The package i18never was found to contain malicious code. Source: ghsa-malware f8457dd91952dfd151549c2a5de56ff988a48ae31ebd0eae188e8a62999cb040 Any...

Malicious code in nad-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34249dc2bb9d97e2f560efbcef33d2f0f0de8cb15f9c66a984697700d6b92d43 The package nad-home was found to contain malicious code. Source: ghsa-malware 5d84934ad23672579c5ab6e2f431b6f1b99a7a8f0e872a628503037c6298f8d4 Any...

Malicious code in smart-utils-alice (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de5b916487c66ac49dea93a8859097db125ab6c1b8ea18a72bd3f72cdcfaff6 The package smart-utils-alice was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192595 Malicious code in smart-utils-alice (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de5b916487c66ac49dea93a8859097db125ab6c1b8ea18a72bd3f72cdcfaff6 The package smart-utils-alice was found to contain malicious code. Source: ghsa-malware...