EUVD-2025-80459

Malicious code in staleseahorse0xrequest npm...

MAL-2025-109068 Malicious code in stale_seahorse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e851fdb29f6e0b3fc6311d79a164e86fd70a97ff8c1183bf8cfb014eb074175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73546

Malicious code in stalefireflyz3n npm...

EUVD-2025-51829

Malicious code in stale-tomato-snail npm...

EUVD-2025-51832

Malicious code in stale-blush-chameleon npm...

EUVD-2025-51833

Malicious code in stale-amaranth-sparrow npm...

Malicious code in stale-blush-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7240ea137968f15331e86cf063e66a5acc4f34e028b2a4ae07cd7c60e3b5dc72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51830

Malicious code in stale-moccasin-rook npm...

EUVD-2025-51831

Malicious code in stale-jade-amphibian npm...

Stale Translation Lookaside Buffer (TLB) Entry Vulnerability

Summary An internally reported microcode bug in some EPYC™ AMD CPUs could allow a local admin-privileged attacker to run SEV-SNP Secure Encrypted Virtualization - Secure Nested Paging guests using stale TLB entries. This bug could allow SNP active vCPUs to reuse TLB entries from other virtual...

HPESBHF04962 rev.1 - Certain HPE ProLiant DL/XL servers Using Certain AMD EPYC Processors. AMD-SB-3029: Stale Translation Lookaside Buffer (TLB) Entry Vulnerability, Local Unauthorized Access Vulnerability

Potential Security Impact: Local: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL325 Gen12 - Prior to 1.1005-27-2025 HPE ProLiant Compute DL345 Gen12 - Prior to 1.1005-27-2025 HPE ProLiant DL145 Gen11 - Prior to 1.7008-07-2025 HPE ProLia...

EUVD-2025-49321

Malicious code in staletyrannosaurusz3n npm...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990550 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989786 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989445 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained At a few places the driver...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990136 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained At a few places the driver...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990379)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990379 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained At a few places the driver...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm/debugvmpgtable: Clear page table entries at destroyargs The mm/debugvmpagetable test manually allocates page table entries for the tests it runs, using the mmstruct that it has manually allocated. This itself is fine, but when...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Regulator: Core – Fix for NULL dereferencing on unbinding due to stale coupling data Failing to reset couplingdesc.ncoupled after freeing coupledrdevs can lead to NULL pointer dereferencing when accessing the regulators after...

SUSE CVE-2025-40093

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fecm: Refactor bind path to use free After an bind/unbind cycle, the ecm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...