CVE-2022-50154 PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains()

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Fix refcount leak in mtkpcieinitirqdomains ofgetchildbyname returns a node pointer with refcount incremented, so we should use ofnodeput on it when we don't need it anymore. Add missing ofnodeput to avoid...

CVE-2022-50153 usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe

In the Linux kernel, the following vulnerability has been resolved: usb: host: Fix refcount leak in ehcihcdppcofprobe offindcompatiblenode returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

CVE-2022-50074 apparmor: Fix memleak in aa_simple_write_to_buffer()

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in aasimplewritetobuffer When copyfromuser failed, the memory is freed by kvfree. however the management struct and data blob are allocated independently, so only kvfreedata cause a memleak issue here. Use...

CVE-2022-50061 pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map

In the Linux kernel, the following vulnerability has been resolved: pinctrl: nomadik: Fix refcount leak in nmkpinctrldtsubnodetomap ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak."...

CVE-2022-50032 usb: renesas: Fix refcount leak bug

In the Linux kernel, the following vulnerability has been resolved: usb: renesas: Fix refcount leak bug In usbhsrza1hardwareinit, offindnodebyname will return a node pointer with refcount incremented. We should use ofnodeput when it is not used anymore...

CVE-2022-50023 dmaengine: dw-axi-dmac: ignore interrupt if no descriptor

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-axi-dmac: ignore interrupt if no descriptor If the channel has no descriptor and the interrupt is raised then the kernel will OOPS. Check the result of vchannextdesc in the handler axichanblockxfercomplete to avoid...

MAL-2025-5092 Malicious code in world-id-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5087 Malicious code in react-web3-cache (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5084 Malicious code in mangeto (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5079 Malicious code in eslint-plugin-facebook (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5072 Malicious code in @me404org/test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5146 Malicious code in teaspoon-devkit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-38082 gpio: virtuser: fix potential out-of-bound write

In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix potential out-of-bound write If the caller wrote more characters, count is truncated to the max available space in "simplewritetobuffer". Check that the input size does not exceed the buffer size. Write a zero...

CVE-2025-38080 drm/amd/display: Increase block_sequence array size

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase blocksequence array size Why It's possible to generate more than 50 steps in hwssbuildfastsequence, for example with a 6-pipe asic where all pipes are in one MPC chain. This overflows the blocksequence...

BELL-CVE-2025-49176

Bulletin has no description...

BELL-CVE-2025-49179

Bulletin has no description...

BELL-CVE-2025-49175

Bulletin has no description...

MAL-2025-5461 Malicious code in sparemanager (npm)

The package communicates with a domain associated with malicious activity...

CGA-3H3V-RXHR-WQM7

Bulletin has no description...

Withdrawn Advisory: microlight.js has a null pointer dereference vulnerability

Withdrawn Advisory This advisory has been withdrawn because a website owner has to set CSS color values. The proof of concept doesn't demonstrate how a malicious user who is not the website owner can cause an application crash. This link has been maintained to preserve external references. Origin...