ROS-20251117-06

A vulnerability in the vfs.c component of the Linux operating system kernel is related to reading outside the allowed boundaries of the of the data buffer. Exploitation of the vulnerability could allow an attacker to impact the integrity of the data integrity...

Malicious code in thambi-vers-vfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90201c5bc0e667624b7afc3adca95a93d98d8903da5f2cdd4279c542995f245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135524

Malicious code in thambi-verxs-vfs npm...

MAL-2025-179106 Malicious code in thambi-verxs-vfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49aa701036fd69ec6fa57b86f2fba75b3112d614f9b3ca5273b676b49e750452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135532

Malicious code in thambi-vers-vfs npm...

EUVD-2025-135531

Malicious code in thambi-vers-vfs npm...

MAL-2025-179102 Malicious code in thambi-vers-vfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90201c5bc0e667624b7afc3adca95a93d98d8903da5f2cdd4279c542995f245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135523

Malicious code in thambi-verxs-vfs npm...

Malicious code in thambi-verxs-vfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49aa701036fd69ec6fa57b86f2fba75b3112d614f9b3ca5273b676b49e750452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

RHEL 9 : kernel (RHSA-2025:20518)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:20518 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...

ALSA-2025:20518 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...

Samba Information Disclosure (CVE-2025-9640)

In the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability. Note that Nessus has not tested for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988856)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988856 advisory. In the Linux kernel, the following vulnerability has been resolved: capabilities: fix potential memleak on error path from vfsgetxattralloc In capinodegetsecurity, w...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2025-988620)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988620 advisory. A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated...

CVE-2025-40105

CVE-2025-40105 is a Linux kernel vulnerability where, under certain conditions when using open_by_handle_at() on an uncached inode, a disconnected dentry could be created and later leaked, potentially contributing to the infamous “Busy inodes after unmount” issue if the parent is disconnected. Th...

Amazon Linux 2023 : libnetapi, libnetapi-devel, libsmbclient (ALAS2023-2025-1234)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1234 advisory. A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content...

Medium: samba

Issue Overview: A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure...

Linux Distros Unpatched Vulnerability : CVE-2025-9640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an...

OESA-2025-2511 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A vulnerability has been found in Samba File Transfer Software the affected version is unknown and classified as critical.The CWE definition for the vulnerability is CWE-77. The product constructs all or...