151 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-98056
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: remove stale namespaces by NSID range during scan nvmescannslist drops the stale namespaces in each gap in the reported NSID list one NSID at a time. Ever...
PT-2026-83012
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18 Description An issue exists in the spi-qpic-snand driver where the qcom spi send cmdaddr function programs NAND FLASH CMD/NAND EXEC CMD and submits descriptors, causing the controller to execute the command...
CVE-2026-72142: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 atomic SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next receive cycle has...
PT-2026-72633
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA usb-audio qcom component where the subs-opened variable is set before the service interval is validated during the enable process. If an invalid interval is...
EUVD-2026-32804
In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fetch events and receive messages until the BMC said it was done. To avoid issues with BMCs that never say they are done, add a limit of 10 fetches at a...
AZL-85860 CVE-2026-43191 affecting package kernel for versions less than 6.6.137.1-2
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust PHY FSM transition to TXEN-to-PLLON for TMDS on DCN35 Why A backport of the change made for DCN401 that addresses an issue where we turn off the PHY PLL when disabling TMDS output, which causes the OTG to...
AZL-77118 CVE-2026-23110 affecting package kernel for versions less than 6.6.126.1-1
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Wake up the error handler when final completions race against each other The fragile ordering between marking commands completed or failed so that the error handler only wakes when the last running command completes o...
PT-2026-5406
Name of the Vulnerable Software and Affected Versions Zigbee affected versions not specified Description A malformed 802.15.4 MAC Data Request can cause a Zigbee Coordinator to send a ‘network leave’ request to a Zigbee router. This results in the Zigbee Router becoming stuck in a state where it...
PT-2026-6180
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A race condition exists within the SCSI layer of the Linux kernel that can prevent the error handler from being woken up, leading to stuck I/O operations. This occurs due to memory...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to clear commands after a chip reset, which could lead to stuck commands and DMA mapping errors...
PT-2025-53011
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fix included in commit aefed3e5548f Description The Linux kernel contains an issue within the qla2xxx SCSI driver related to command handling after a chip reset. A previous commit aefed3e5548f introduced...
EUVD-2025-102054
Malicious code in stuckhornetz3n npm...
EUVD-2025-94906
Malicious code in stuckcheetahz3n npm...
EUVD-2025-74190
Malicious code in stuckwallabysilver-46 npm...
EUVD-2025-78190
Malicious code in stuckparrotz3n npm...
EUVD-2025-51752
Malicious code in stuck-copper-silverfish npm...
Malicious code in stuck-crimson-blackbird (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d861e71318c87614998abaf8f68beb70e58dd4eb9e2f39043220626b3d184e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51750
Malicious code in stuck-maroon-cobra npm...