Linux Distros Unpatched Vulnerability : CVE-2025-38241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/shmem, swap: fix softlockup with mTHP swapin Following softlockup can be easily reproduce...

Linux Distros Unpatched Vulnerability : CVE-2023-52932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/swapfile: add condresched in getswappages The softlockup still occurs in getswappages under memory pressure. 64 CPU cores, 64GB memory, and 28 zram devices,...

Linux Distros Unpatched Vulnerability : CVE-2025-37834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/vmscan: don't try to reclaim hwpoison folio Syzkaller reports a bug as follows: Injecting memory failure for pfn 0x18b00e at process virtual address 0x20ffd0...

Malicious code in cro-defi-swap-periphery (npm)

The package cro-defi-swap-periphery was found to contain malicious code...

MAL-2025-17690 Malicious code in cro-defi-swap-periphery (npm)

The package cro-defi-swap-periphery was found to contain malicious code...

MAL-2025-34281 Malicious code in swap_middleware (npm)

The package swapmiddleware was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-38242

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: userfaultfd: fix race of userfaultfdmove and swap cache This commit fixes two kinds of races, they may have different results: Barry reported a BUGON in...

Linux Distros Unpatched Vulnerability : CVE-2022-49992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/mprotect: only reference swap pfn page if type match Yu Zhao reported a bug after the...

Linux Distros Unpatched Vulnerability : CVE-2022-50095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - posix-cpu-timers: Cleanup CPU timers before freeing them during exec Commit 55e8c8eb2c7b posix-cpu- timers: Store a reference to a pid not a task started lookin...

Linux Distros Unpatched Vulnerability : CVE-2022-50230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: set UXN on swapper page tables This issue was fixed upstream by accident in c3cee924bd85 arm64: head: cover entire kernel image in initial ID map as part...

Linux Distros Unpatched Vulnerability : CVE-2025-22034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLLSPLITPMD with hugetlb VMAs Patch series mm: fixes for device-exclusive...

Linux Distros Unpatched Vulnerability : CVE-2020-12408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This...

The vulnerability of the Linux operating system’s kernel component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel phy component is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-35959

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to userfaultfd. Specifically, a crash can occur in the UFFDIO MOVE operation when a Page Middle Directory PMD is a migration entry. The issue...

CVE-2025-54136 Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals

Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an already trusted MCP configuration file inside a shared GitHub repository or editing the file locally on the target's machine. Once a...

Malicious Package

Overview swap-token-list-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in swap-token-list-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff37669cef0c949bb0dd7b4eebab3d14891256532b09e265c1a486fb2ca0996c Any computer that has this package installed or running should be considered...

MAL-2025-6314 Malicious code in swap-token-list-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff37669cef0c949bb0dd7b4eebab3d14891256532b09e265c1a486fb2ca0996c Any computer that has this package installed or running should be considered...

DEBIAN-CVE-2025-38267

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARNON due to a commitoverrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the reader page is the same as the commit buffer...

SUSE CVE-2025-38242

In the Linux kernel, the following vulnerability has been resolved: mm: userfaultfd: fix race of userfaultfdmove and swap cache This commit fixes two kinds of races, they may have different results: Barry reported a BUGON in commit c50f8e6053b0, we may see the same BUGON if the filemap lookup...