CVE-2026-74544

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: validate offshift to prevent shift-out-of-bounds u32change copies the user-provided tcu32sel.offshift unsigned char, 0-255 into the kernel knode object without bounds validation. When a packet later hits...

SUSE-SU-2026:2490-1 Security update for libarchive

This update for libarchive fixes the following issues - CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches bsc1253088. - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop and DoS bsc1259635. - CVE-2026-4424:...

EUVD-2026-28670

In the Linux kernel, the following vulnerability has been resolved: ublk: fix NULL pointer dereference in ublkctrlsetsize ublkctrlsetsize unconditionally dereferences ub-ubdisk via setcapacityandnotify without checking if it is NULL. ub-ubdisk is NULL before UBLKCMDSTARTDEV completes it is only...

CVE-2026-27814: Concurrent Execution using Shared Resource with Improper Synchronization

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race C++ UB triggered by an A 1-phase ↔ 3-phase switch request acswitchthreephaseswhilecharging during charging/waiting executes concurrently with the state machine loop. Version 2026.02.0 contains a patch...

Malicious code in sonic-kots-ub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6191a0201bc68b678aa7178537532393421df8bd55b30a21d5f64fef861d6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jfuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e61a4f3e79ec5759a78db59773e4e8a7eff3a02e6e827444351ab64d832d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6007860efc7798b9e83e68f5b0fe2fd272ee355f93b3117153d20fb2c7943a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c35499c93079f889ae2c4310a22ff5bbbd30925393ce56cc3f7e5b6ad8a9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdmafdacafeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e174eaa05b7b65e6ed969bc051aa0d8f9b7d7727edb3623214b55d2330175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e80fb8e41c4d94f7aa38d5a729ecd5cb443f2636b59d5fe34aa647dae90387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183391 Malicious code in lobac-ub-jfuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e61a4f3e79ec5759a78db59773e4e8a7eff3a02e6e827444351ab64d832d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jfgaayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a064245ae6b242801867474940e337168fdd81ee1f1fb97262c00571db8580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183394 Malicious code in lobac-ub-jma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7932306511992d3115ceaee940c3690e668a76c9264585239ea245095346d591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8867d5a4adca4470b49a9ada07cc66bdd8d33802fd7b6715f89fde1562f2967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdmafdacatfeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e95d40dd065d3ac16c6ecbba7f119369702ade4a442006780fb6891633cba58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b743762e0d76c300c0271597409ff49b03980a80296c853323e93244839899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144478

Malicious code in guide-maia-ub npm...

CVE-2025-40159: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdpdesc validation Turned out certain clearly invalid values passed in xdpdesc from userspace can pass xp,unalignedvalidatedesc and then lead to UBs or just invalid frames to be queued for xmit...

EUVD-2021-21939

Malware in sbrugna...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2134)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/fpu: KVM: Set the base guest FPU uABI size to sizeofstruct kvmxsave.CVE-2022-49557 A cross-privilege Spectre v2 vulnerability allows attackers...