2026-07-20 归档

今日共收录 1577 条安全情报,包含 453 个 CVE,813 篇安全通告,以及 64 篇研究论文。

← 返回归档列表
安全公告2026-07-19 发布INFO

usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers

CVE-2026-63963

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: validate VDO count in Discover Id

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one

CVE-2026-63950

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nr_pages to 1 at loop start in

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor

CVE-2026-63941

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCR_EL2 provided by a gue

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

macsec: fix replay protection at XPN lower-PN wrap

CVE-2026-63925

In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection at XPN lower-PN wrap

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

drm/i915: Fix potential UAF in TTM object purge

CVE-2026-63884

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential UAF in TTM object purge TL

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

serial: dz: Convert to use a platform device

CVE-2026-63877

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Preve

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

serial: zs: Convert to use a platform device

CVE-2026-63876

In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Preve

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

wifi: rtw88: usb: fix memory leaks on USB write failures

CVE-2026-63821

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: fix memory leaks on USB write fai

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

f2fs: fix missing read bio submission on large folio error

CVE-2026-63820

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large foli

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

f2fs: fix to do sanity check on f2fs_get_node_folio_ra()

CVE-2026-63819

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on f2fs_get_node_folio

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

block: Avoid mounting the bdev pseudo-filesystem in userspace

CVE-2026-63810

In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

bpf: use kvfree() for replaced sysctl write buffer

CVE-2026-63809

In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced sysctl write buffer

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level

CVE-2026-63807

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()

CVE-2026-63806

In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUG_ON() in ioeventf

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

blk-cgroup: fix UAF in __blkcg_rstat_flush()

CVE-2026-63802

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path

CVE-2026-63794

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Fix page overflow in sev_dbg_crypt() for

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

fuse: re-lock request before replacing page cache folio

CVE-2026-53388

In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache f

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

1Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgery

CVE-2026-16222

A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1. This issue affects some unknown processing of the file ba

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions

CVE-2026-16218

A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of th

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-19 发布INFO

In the Linux kernel, the following vulnerability has been resolved: l2tp: use list_del_rcu in...

CVE-2026-64119

In the Linux kernel, the following vulnerability has been resolved: l2tp: use list_del_rcu in l2tp_session_unhash An u

历史摘要 · 未重新核验 · GitHub Advisory