SUSE CVE-2025-38737

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3inittransformrq to initialise buffer to NULL before calling netfsallocfolioqbuffer as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should...

UBUNTU-CVE-2025-38737

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3inittransformrq to initialise buffer to NULL before calling netfsallocfolioqbuffer as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should...

CVE-2025-38737 cifs: Fix oops due to uninitialised variable

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3inittransformrq to initialise buffer to NULL before calling netfsallocfolioqbuffer as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should...

CVE-2025-38737

CVE-2025-38737 affects the Linux kernel CIFS implementation. The issue is an oops caused by an uninitialised variable in smb3_init_transform_rq(), where the buffer used by netfs_alloc_folioq_buffer() could be read/modified unexpectedly. The fix initializes the buffer to NULL before calling netfs_...

Malicious code in auth-pulsar-local-transform (npm)

The package auth-pulsar-local-transform was found to contain malicious code...

Malicious code in petrology-loop-ganymede-transform (npm)

The package petrology-loop-ganymede-transform was found to contain malicious code...

Malicious code in react-bootstrap-telesto-jupiter-transform (npm)

The package react-bootstrap-telesto-jupiter-transform was found to contain malicious code...

MAL-2025-46371 Malicious code in transform-meissa-nightmare-venus (npm)

The package transform-meissa-nightmare-venus was found to contain malicious code...

MAL-2025-43544 Malicious code in auth-pulsar-local-transform (npm)

The package auth-pulsar-local-transform was found to contain malicious code...

Malicious code in yaml-transform-rollup-plugin-dione (npm)

The package yaml-transform-rollup-plugin-dione was found to contain malicious code...

MAL-2025-46754 Malicious code in yaml-transform-rollup-plugin-dione (npm)

The package yaml-transform-rollup-plugin-dione was found to contain malicious code...

MAL-2025-45545 Malicious code in petrology-loop-ganymede-transform (npm)

The package petrology-loop-ganymede-transform was found to contain malicious code...

Malicious code in transform-meissa-nightmare-venus (npm)

The package transform-meissa-nightmare-venus was found to contain malicious code...

Malicious code in kronos-init-carpo-transform (npm)

The package kronos-init-carpo-transform was found to contain malicious code...

MAL-2025-46253 Malicious code in terraforming-virtualreality-transform-membrane (npm)

The package terraforming-virtualreality-transform-membrane was found to contain malicious code...

MAL-2025-45761 Malicious code in react-bootstrap-telesto-jupiter-transform (npm)

The package react-bootstrap-telesto-jupiter-transform was found to contain malicious code...

Malicious code in terraforming-virtualreality-transform-membrane (npm)

The package terraforming-virtualreality-transform-membrane was found to contain malicious code...

MAL-2025-44902 Malicious code in kronos-init-carpo-transform (npm)

The package kronos-init-carpo-transform was found to contain malicious code...

net/mlx5e: Remove skb secpath if xfrm state is not found

...

xfrm: interface: fix use-after-free after changing collect_md xfrm interface

...