CVE-2025-38593

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: fix double free in 'hcidiscoveryfilterclear' Function 'hcidiscoveryfilterclear' frees 'uuids' array and then sets it to NULL. There is a tiny chance of the following race: 'hcicmdsyncwork'...

DEBIAN-CVE-2025-38574

In the Linux kernel, the following vulnerability has been resolved: pptp: ensure minimal skb length in pptpxmit Commit aabc6596ffb3 "net: ppp: Add bound checking for skb data on pppsynctxmung" fixed pppsynctxmunge We need a similar fix in pptpxmit, otherwise we might read uninit data as reported ...

AZL-66521 CVE-2025-38578 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fssyncinodemeta syzbot reported an UAF issue as below: 1 2 1 https://syzkaller.appspot.com/text?tag=CrashReport&x=16594c60580000 ================================================================== BUG:...

CVE-2025-38593 Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: fix double free in 'hcidiscoveryfilterclear' Function 'hcidiscoveryfilterclear' frees 'uuids' array and then sets it to NULL. There is a tiny chance of the following race: 'hcicmdsyncwork'...

CVE-2025-49047

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keeross DigitalOcean Spaces Sync do-spaces-sync allows Stored XSS.This issue affects DigitalOcean Spaces Sync: from n/a through = 2.2.1...

CVE-2025-38538 dmaengine: nbpfaxi: Fix memory corruption in probe()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: nbpfaxi: Fix memory corruption in probe The nbpf-chan array is allocated earlier in the nbpfprobe function and it has "numchannels" elements. These three loops iterate one element farther than they should and corrupt...

Security Updates for Azure File Sync Agent (August 2025)

The Microsoft Azure File Sync Agent running on the remote host is prior to 18.3, 19.x prior to 19.2, 20.x prior to 20.1, or 21.x prior to 21.1. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the...

Malicious code in browser-sync-task-runner (npm)

The package browser-sync-task-runner was found to contain malicious code...

Malicious code in magnetosphere-tectonic-eleventy-sync (npm)

The package magnetosphere-tectonic-eleventy-sync was found to contain malicious code...

Malicious code in memoize-sync (npm)

The package memoize-sync was found to contain malicious code...

Malicious code in slate-sync (npm)

The package slate-sync was found to contain malicious code...

Malicious code in sync-superagent-forever-singularitarianism (npm)

The package sync-superagent-forever-singularitarianism was found to contain malicious code...

Malicious code in sync-chalk-cygnus-arcturus (npm)

The package sync-chalk-cygnus-arcturus was found to contain malicious code...

Malicious code in accretion-puppeteer-pegasus-sync (npm)

The package accretion-puppeteer-pegasus-sync was found to contain malicious code...

Malicious code in unuk-morgan-mini-css-extract-plugin-sync (npm)

The package unuk-morgan-mini-css-extract-plugin-sync was found to contain malicious code...

Malicious code in sync-subscription-foundation-procyon (npm)

The package sync-subscription-foundation-procyon was found to contain malicious code...

Malicious code in technosignature-higgs-selenology-sync (npm)

The package technosignature-higgs-selenology-sync was found to contain malicious code...

Malicious code in ganymede-sync-materialize-jabbah (npm)

The package ganymede-sync-materialize-jabbah was found to contain malicious code...

Malicious code in yaml-avior-sync-csrf (npm)

The package yaml-avior-sync-csrf was found to contain malicious code...

brick (0.0.0), duo-parse (0.4.0) +4 more potentially affected by unknown CVE via memoize-sync (>=0.0.2, <=2.0.0)

memoize-sync NPM version =0.0.2, =0.0.9, =5.0.0, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26179...