12434 matches found
EUVD-2025-30865
Malicious code in bioql PyPI...
EUVD-2025-13060
Malicious code in bioql PyPI...
EUVD-2025-26086
Malicious code in bioql PyPI...
EUVD-2025-19766
Malicious code in bioql PyPI...
EUVD-2024-0876
Malicious code in bioql PyPI...
EUVD-2021-31073
Malicious code in bioql PyPI...
EUVD-2025-11176
Malicious code in bioql PyPI...
EUVD-2021-33972
Malicious code in bioql PyPI...
EUVD-2024-31811
Malicious code in bioql PyPI...
EUVD-2022-55493
Malicious code in bioql PyPI...
EUVD-2023-34988
Malicious code in bioql PyPI...
EUVD-2023-25715
Malicious code in bioql PyPI...
RLSA-2025:16373 Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock: Fix transport TOCTOU CVE-2025-38461 For more details about the security issues, including the impact, a CVSS score,...
SUSE CVE-2023-53464
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Check that sock is valid before iscsisetparam The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad "scsi: iscsi: iscsitcp: Fix null-ptr-deref while calling...
CVE-2025-39897
In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaenginedescgetmetadataptr which can return an error pointer and lead to potential crashes or undefined behaviour if the...
CVE-2025-39913
In the Linux kernel, the following vulnerability has been resolved: tcpbpf: Call skmsgfree when tcpbpfsendverdict fails to allocate psock-cork. syzbot reported the splat below. 0 The repro does the following: 1. Load a skmsg prog that calls bpfmsgcorkbytesmsg, corkbytes 2. Attach the prog to a...
CVE-2025-54289 Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API
Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...
tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
...
Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.
...
SUSE CVE-2022-50459
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: iscsitcp: Fix null-ptr-deref while calling getpeername Fix a NULL pointer crash that occurs when we are freeing the socket at the same time we access it via sysfs. The problem is that: 1. iscsiswtcpconngetparam and...