Astra Linux – Vulnerability in Qemu

A reentrancy issue related to DMA was discovered in the Tulip device emulation in QEMU. When Tulip reads from or writes to the rx/tx descriptor, or copies a rx/tx frame, it does not check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fixed the issue where the array ‘lp-phy8’ might be out of bounds. In line 5001, if all values in the array ‘lp-phy8’ are not 0, then at the end of the ‘for’ loop, the value of ‘k’ will be 8. At this point, the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989731 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986339 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986425)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986425 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987098 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if...

EUVD-2022-35183

Malicious code in bioql PyPI...

MAL-2025-44849 Malicious code in kelp-tulip-bif360-project (npm)

The package kelp-tulip-bif360-project was found to contain malicious code...

Malicious code in kelp-tulip-bif360-project (npm)

The package kelp-tulip-bif360-project was found to contain malicious code...

MAL-2025-37300 Malicious code in tulip-umbra-hof493-project (npm)

The package tulip-umbra-hof493-project was found to contain malicious code...

MAL-2025-17172 Malicious code in cloud-tulip-ivv088-project (npm)

The package cloud-tulip-ivv088-project was found to contain malicious code...

Malicious code in tulip-cherry-vmx378-project (npm)

The package tulip-cherry-vmx378-project was found to contain malicious code...

Malicious code in tulip-honeycomb-vdd669-project (npm)

The package tulip-honeycomb-vdd669-project was found to contain malicious code...

Malicious code in meadow-tulip-sjd715-project (npm)

The package meadow-tulip-sjd715-project was found to contain malicious code...

Malicious code in nautilus-tulip-bjm035-project (npm)

The package nautilus-tulip-bjm035-project was found to contain malicious code...

Malicious code in nugget-tulip-efm321-project (npm)

The package nugget-tulip-efm321-project was found to contain malicious code...

Malicious code in tulip-dune-jri292-project (npm)

The package tulip-dune-jri292-project was found to contain malicious code...

Malicious code in tulip-frost-zlc923-project (npm)

The package tulip-frost-zlc923-project was found to contain malicious code...

Malicious code in tulip-honey-fyn898-project (npm)

The package tulip-honey-fyn898-project was found to contain malicious code...

Malicious code in tulip-moose-oif529-project (npm)

The package tulip-moose-oif529-project was found to contain malicious code...