SUSE-SU-2025:4261-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.30 fixes various security issues The following security issues were fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmapipuadt bsc1245778. - CVE-2025-23145: mptcp: fix NULL pointer in canacceptnewsubflow...

EUVD-2025-101202

Malicious code in upperbobolinkz3n npm...

EUVD-2025-75326

Malicious code in upperstoat-notthedev npm...

EUVD-2025-78011

Malicious code in uppercaterpillarz3n npm...

EUVD-2025-80169

Malicious code in upperboardumbs npm...

EUVD-2025-73105

Malicious code in upperslugz3n npm...

EUVD-2025-73104

Malicious code in uppertakinz3n npm...

EUVD-2025-51298

Malicious code in upper-harlequin-lion npm...

EUVD-2025-51300

Malicious code in upper-blue-crocodile npm...

EUVD-2025-51299

Malicious code in upper-blush-ladybug npm...

MAL-2025-71349 Malicious code in upper-blue-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4540849173ca9cbc681ebd4c57236d91ff7d362481e1733be9f532e650c57cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56829

Malicious code in upperalpacaz3n npm...

Fedora 42 : openapi-python-client (2025-16b2da653e)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-16b2da653e advisory. - add patch to remove dependency upper bound versions - remove obsolete patches that updated upper bound versions - clean up spec file formatting Tenable has...

Fedora 43 : openapi-python-client (2025-ce3d358bcc)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ce3d358bcc advisory. - add patch to remove dependency upper bound versions - remove obsolete patches that updated upper bound versions - clean up spec file formatting Tenable has...

ptp: Add a upper bound on max_vclocks

...

CVE-2025-40057

CVE-2025-40057 concerns the Linux kernel. The issue, tracked as ptp: Add a upper bound on max_vclocks, arises when the max_vclocks_store argument becomes too large for kcalloc, potentially triggering allocation failures. The vulnerability is resolved by extending guards to prevent oversized value...

CVE-2025-40057 ptp: Add a upper bound on max_vclocks

In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on maxvclocks syzbot reported WARNING in maxvclocksstore. This occurs when the argument max is too large for kcalloc to handle. Extend the guard to guard against values that are too large for kcalloc...

Linux Distros Unpatched Vulnerability : CVE-2025-39973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i40e: add validation for ringlen param The ringlen parameter provided by the virtual function VF is assigned directly to the hardware memory context HMC without...

SUSE CVE-2022-50567

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...

CVE-2022-50567 fs: jfs: fix shift-out-of-bounds in dbAllocAG

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...