Astra Linux - уязвимость в linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerabilities have been resolved: media: vivid: Changed the size of the composition Syzkaller discovered a bug: BUG: KASAN: Out-of-bounds access to memory during tpgfillplanepattern in drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 inline BUG: KASAN:...

Astra Linux - уязвимость в linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose-height boundary issue Syzkaller identified a bug: BUG: Unable to handle page faults for address: ffffc9000a3b1000 PF: Supervisor write access in kernel mode PF: Errorcode0x0002 – Not-present page PGD...

Astra Linux - уязвимость в linux-5.10, linux-5.15, linux

A memory leak flaw, along with potential division by zero and integer overflow issues, have been detected in the Linux kernel’s V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as the VIDIOCSDVTIMINGS ioctl. This could allow a local user to crash the...

CVE-2025-24293

Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by default. The default allowed list contains three methods allow for the circumvention of the safe defaults which enables...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38226)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38226 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003644)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003644 advisory. An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions whe...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004200)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004200 advisory. An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions whe...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000273)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000273 advisory. An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions whe...

EUVD-2025-100717

Malicious code in vividviperz3n npm...

Malicious code in vivid_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d40c5e52ebf06af24f18897761a7b616b6aac6a1c7e1a2daec8e9f0a8022bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74097

Malicious code in vividslothorange-15 npm...

EUVD-2025-74099

Malicious code in vividconstrictoramethyst-57 npm...

EUVD-2025-73005

Malicious code in vividmarlinz3n npm...

MAL-2025-97285 Malicious code in vivid_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8db8d9c15f27b1c85d35fd3b43b75eb7058bd7e60d17e32ca649be63fe69cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73007

Malicious code in vividbirdz3n npm...

EUVD-2025-73006

Malicious code in vividdingoz3n npm...

EUVD-2025-62080

Malicious code in vividharez3n npm...

Malicious code in vivid-aqua-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dc37fff44a5e62dddd8cbf40b3903605463bc45996550ab2d392162a89e17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51164

Malicious code in vivid-maroon-wildebeest npm...

EUVD-2025-51166

Malicious code in vivid-aqua-thrush npm...