EUVD-2025-121600

Malicious code in stream-magellan-gemini-webpack npm...

MAL-2025-146817 Malicious code in publish-stream-radiant-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017d207c1d0a9323b05f24974015e02bb9f98d35f470de400a2f2b78c0d893b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148312 Malicious code in stream-chalk-elara-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e8742ef7707e771c8ceaf7750f9e26d84d6f5e2fa92e9bf32fdaa0178bef63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-gulp-stream-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8a4d9de37e9592ba9e3c891cf04f83429c155a22194a21fdf1bb9a7af61ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116792

Malicious code in algol-stream-node-config-enif npm...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990876 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpudm initialize when stream nums greater than 6 Why Coverity reports...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the dcstreamsetcursorattributes function not checking for stream pointers and their nested members, which could...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from idpf's failure to clean up the remaining SKBs in a PTP stream, which could lead to a memory leak...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990769 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: clear outcurr if all frag chunks of current msg are pruned A crash was reported by Zhen Che...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990829 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check stream before comparing them WHAT & HOW amdgpudm can pass a null stream to...

ROS-20251112-10

Vulnerability in the Open Babel expert system for analyzing chemical data is related to a manipulation in the function ChemKinFormat::ReadReactionQualifierLines of the /src/formats/chemkinformat.cpp file. Exploitation of the vulnerability could allow an attacker to cause a denial of service A...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990836 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for toppipetoprogram in commitplanesforstream This commit address...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the imx8-isi driver not properly handling stream cleanup, which could lead to a resource leak...

kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sofipcmsgdata The nullity of sps-cstream should be checked similarly as it is done in sofsetstreamdataoffset function. Assuming that it is not NULL if sps-stream is NULL is...

kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sofipcmsgdata The nullity of sps-cstream should be checked similarly as it is done in sofsetstreamdataoffset function. Assuming that it is not NULL if sps-stream is NULL is...

USN-7866-1: Intel Microcode vulnerabilities

Barak Gross discovered that some Intel® Xeon® processors with SGX enabled did not properly handle buffer restrictions. A local authenticated user could potentially use this issue to escalate their privileges. CVE-2025-20053 Avinash Maddy discovered that some Intel® processors did not properly...

ROS-20251110-03

Vulnerability in Google Chrome browser is related to insufficient input data validation when processing DOM elements. Exploitation of the vulnerability allows a remote attacker to launch a spoofing attack or cause a denial of service. Spoofing attack or cause a denial of service Vulnerability in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990123 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix possible null-ptr-deref when assigning a stream While AudioDSP drivers assign...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989604 advisory. In the Linux kernel, the following vulnerability has been resolved: media: stk1160: If start stream fails, return buffers with VB2BUFSTATEQUEUED If the callback...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988752)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988752 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix possible null-ptr-deref when assigning a stream While AudioDSP drivers assign...