PT-2026-4494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the bpf prog test run xdp function within the Linux kernel. The issue stems from an error handling path introduced by commit 1c1949982524, which failed t...

CVE-2023-54251

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: Limit TCATAPRIOATTRSCHEDCYCLETIME to INTMAX. syzkaller found zero division error 0 in divs64rem called from getcycletimeelapsed, where sched-cycletime is the divisor. We have tests in parsetaprioschedule so tha...

MAL-2025-192993 Malicious code in weorewfoi2393 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 00296490bb9bcec28af256a76790f8c5f96dd45d4184ac6617bbdffad3e674a3 Package tests possible malicious actions during installation by starting notepad. There is no other functionality, it's clearly a test of possible malicious...

SUSE CVE-2022-50813

In the Linux kernel, the following vulnerability has been resolved: drivers: mcb: fix resource leak in mcbprobe When probe hook function failed in mcbprobe, it doesn't put the device. Compiled test only...

SUSE CVE-2023-54242

In the Linux kernel, the following vulnerability has been resolved: block, bfq: Fix division by zero error on zero wsum When the weighted sum is zero the calculation of limit causes a division by zero error. Fix this by continuing to the next level. This was discovered by running as root: stress-...

SUSE CVE-2023-54251

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: Limit TCATAPRIOATTRSCHEDCYCLETIME to INTMAX. syzkaller found zero division error 0 in divs64rem called from getcycletimeelapsed, where sched-cycletime is the divisor. We have tests in parsetaprioschedule so tha...

SUSE CVE-2023-54326

In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Free IRQs before removing the device In pciendpointtestremove, freeing the IRQs after removing the device creates a small race window for IRQs to be received with the test device memory already released,...

Unity Linux 20.1060a Security Update: kernel (UTSA-2025-992905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992905 advisory. In the Linux kernel, the following vulnerability has been resolved: md: fix a crash in mempoolfree There's a crash in mempoolfree when running the lvm test...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992964)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992964 advisory. In the Linux kernel, the following vulnerability has been resolved: pwm: mediatek: Prevent divide-by-zero in pwmmediatekconfig With CONFIGCOMPILETEST &&...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993139 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on tracearray in kprobeeventgentestexit When...

CellSecInspector: Safeguarding Cellular Networks Via Automated Security Analysis on Specifications

The complexity, interdependence, and rapid evolution of 3GPP specifications present fundamental challenges for ensuring the security of modern cellular networks. Manual reviews and existing automated approaches, which often depend on rule-based parsing or small sets of manually crafted security...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993037)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993037 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in testgensynthcmd and testemptysynthevent testgensynthcmd only free buf...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992721 advisory. In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raidresume There is a KASAN warning in raidresume when...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992918)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992918 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on traceeventfile in kprobeeventgentestexit When...

EUVD-2025-205828

Malicious code in @ptest2535/testpackage npm...

MAL-2025-192981 Malicious code in @ptest2535/test_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b13d530a9ae65d0d85399d64cd8b0842f91f121a59d8e6386d63a730746d23d The package @ptest2535/testpackage was found to contain malicious code. Source: ghsa-malware...

Malware in internal-test-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @peter_wilson12091/internal-json-test-parser

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @peter_wilson12091/internal-json-test-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18430304f650bf998b2421e45c0b8b01fce58239d3dd6fbe9de753128aac9a4d The package @peterwilson12091/internal-json-test-parser was found to contain malicious code. Source: ghsa-malware...

EUVD-2023-60483

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential null-ptr-deref in deviceadd I got the following null-ptr-deref report while doing fault injection test: BUG: kernel NULL pointer dereference, address: 0000000000000058 CPU: 2 PID: 278 Comm: 37-i2c-ds248...