EUVD-2025-25085

Malicious code in bioql PyPI...

EUVD-2023-1176

Malicious code in bioql PyPI...

EUVD-2025-13094

Malicious code in bioql PyPI...

EUVD-2025-11176

Malicious code in bioql PyPI...

EUVD-2025-5275

Malicious code in bioql PyPI...

EUVD-2022-55493

Malicious code in bioql PyPI...

EUVD-2025-19831

Malicious code in bioql PyPI...

EUVD-2022-55340

Malicious code in bioql PyPI...

EUVD-2022-5579

Malicious code in bioql PyPI...

EUVD-2022-1267

Malicious code in bioql PyPI...

EUVD-2025-5169

Malicious code in bioql PyPI...

EUVD-2022-47604

Malicious code in bioql PyPI...

RLSA-2025:16373 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock: Fix transport TOCTOU CVE-2025-38461 For more details about the security issues, including the impact, a CVSS score,...

SUSE CVE-2023-53464

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Check that sock is valid before iscsisetparam The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad "scsi: iscsi: iscsitcp: Fix null-ptr-deref while calling...

CVE-2025-39897

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaenginedescgetmetadataptr which can return an error pointer and lead to potential crashes or undefined behaviour if the...

CVE-2025-39913

In the Linux kernel, the following vulnerability has been resolved: tcpbpf: Call skmsgfree when tcpbpfsendverdict fails to allocate psock-cork. syzbot reported the splat below. 0 The repro does the following: 1. Load a skmsg prog that calls bpfmsgcorkbytesmsg, corkbytes 2. Attach the prog to a...

CVE-2025-54289 Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.

...

Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

...

SUSE CVE-2022-50459

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: iscsitcp: Fix null-ptr-deref while calling getpeername Fix a NULL pointer crash that occurs when we are freeing the socket at the same time we access it via sysfs. The problem is that: 1. iscsiswtcpconngetparam and...