475 matches found
MAL-2025-140233 Malicious code in bulma-venus-galaxy-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2fb7f7af133dbbfc4e97be93b9c523d8332080995751877c6e8e1881fb53ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149124 Malicious code in venus-subscription-pino-xml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b084d77d240ddb72fc2468a96b8d733738ecf2c519fff700a0354752768c0774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149116 Malicious code in venus-mocha-start-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d1cc69d270a33ba2ba84e61c8cfdd3271303ccc4b24590d7adc20af1c71d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149098 Malicious code in vega-semantic-release-vuepress-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3096fc25365fb83f829e2fa85f1c9ae852b143d97925c1584e978adfb786f01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149127 Malicious code in venus-vuetify-regulus-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e17cee68eb004e87c9a313b67a9f1a16ca7cd3689e90a42632fe0a3b8157b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146255 Malicious code in pino-venus-markdownlint-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04621dacd067130e824c714fe59657f902386c209fa4dd53cb3a8325a2af3b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124136
Malicious code in octans-venus-fetch-capella npm...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989745)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989745 advisory. In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: avoid null dereference in deinit If venusprobe fails at pmruntimeputsync the...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989949)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989949 advisory. In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: avoid null dereference in deinit If venusprobe fails at pmruntimeputsync the...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: media: venus: protection against spurious interrupts during probing. Ensure that the interrupt handler is initialized before the interrupt is registered. If the IRQ is registered before hficreate, it’s possible that an interrupt...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: media: venus: Fixed an issue where OOB reading occurred due to a missing payload-bound check. Currently, the eventseqchanged handler processes a variable number of properties sent by the firmware. The number of properties is...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: media: venus: Added a check for the packet size after reading from shared memory. A check was added to ensure that the packet size does not exceed the number of available words after reading the packet header from shared memory...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2025-39782: jbd2: prevent softlockup in jbd2logdocheckpoint bsc1249526. CVE-2025-39773: net: bridge: fix soft lockup in...
EUVD-2009-2925
Malware in sbrugna...
EUVD-2018-3318
Malware in sbrugna...
EUVD-2007-3857
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987394)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987394 advisory. In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: avoid null dereference in deinit If venusprobe fails at pmruntimeputsync the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-423643)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-423643 advisory. In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free bug in venusremove due to race condition in venusprobe, core-wo...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986441)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986441 advisory. In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: avoid null dereference in deinit If venusprobe fails at pmruntimeputsync the...