SUSE CVE-2026-64363

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending keyuptimer in remove appleirremove runs hidhwstop before timerdeletesync. hidhwstop synchronously unregisters the HID input device via hiddisconnect - hidinputdisconnect - inputunregisterdevice,...

UBUNTU-CVE-2026-64363

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending keyuptimer in remove appleirremove runs hidhwstop before timerdeletesync. hidhwstop synchronously unregisters the HID input device via hiddisconnect - hidinputdisconnect - inputunregisterdevice,...

CVE-2026-64363 HID: appleir: fix UAF on pending key_up_timer in remove()

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending keyuptimer in remove appleirremove runs hidhwstop before timerdeletesync. hidhwstop synchronously unregisters the HID input device via hiddisconnect - hidinputdisconnect - inputunregisterdevice,...

CVE-2026-64363

CVE-2026-64363 — Linux kernel HID appleir UAF in remove() : The issue occurs in HID appleir driver where a pending key_up_timer could be dereferenced after input_dev is freed during device teardown. The fix introduces a removing flag protected by the existing spinlock and uses timer_shutdown_sync...

EUVD-2026-48907

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending keyuptimer in remove appleirremove runs hidhwstop before timerdeletesync. hidhwstop synchronously unregisters the HID input device via hiddisconnect - hidinputdisconnect - inputunregisterdevice,...

PT-2026-64584

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending key up timer in remove appleir remove runs hid hw stop before timer delete sync. hid hw stop synchronously unregisters the HID input device via hid disconnect - hidinput disconnect - input...

Malicious code in chromedriver-metalsmith-toml-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099a4ebf7ac7382de09ed462478b2c913c3b9a9bf86d0bb11b53ad48aa1a13c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef31c78684c8daf876f5cdb77cf29b7fae56c3c293db93cf062ad6941c3b2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70615 Malicious code in significant-tomato-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397dfef6807f0949c57e8e8d4495fbdc768bdee20950baa7f1b58225c7b64363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...