2026-07-20 归档

今日共收录 1577 条安全情报,包含 453 个 CVE,813 篇安全通告,以及 64 篇研究论文。

← 返回归档列表
漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblk_nr_poison_inc() and memblk...

CVE-2026-64182

在Linux内核的drivers/base/memory子系统中,存在一个内存块设备引用泄漏漏洞。函数memblk_nr_poison_inc()和memblk_nr_poison_sub()用于增加或减少内存块的poison计数。它们通过

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference leak on remove Patch series "mm: Fix memory block leaks and l...

CVE-2026-64180

CVE-2026-64180 是 Linux 内核内存热插拔子系统中的一个引用泄漏漏洞。当通过 remove_memory_blocks_and_altmaps() 函数移除内存块及其备用映射(altmap)时,函数调用 find_memo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布LOW

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() The memory allocated in ipc_protocol_init() ...

CVE-2026-64179

在Linux内核的IOSM(Intel Onboard System Management)无线广域网(WWAN)子系统中,存在一个潜在的内存泄漏漏洞。具体问题出现在`ipc_imem_init()`函数中:函数通过`ipc_protoco

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布LOW

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() needs to keep holding the bnep_session_sem...

CVE-2026-64178

该漏洞存在于 Linux 内核的蓝牙 bnep 子系统中。bnep_add_connection() 函数在读取 net_device 的 name 字段时未正确持有 bnep_session_sem 信号量,导致与 bnep_del_co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still en...

CVE-2026-64176

Linux 内核的 iwlwifi 驱动中,针对旧款无线设备(如 7265D)存在一个无线传输速率设置错误漏洞。该漏洞源于在引入 v3 速率格式时,驱动内部处理逻辑变更导致的回归。旧设备使用 v1 格式编码速率(采用 PLCP 值,例如 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart When iwlwifi firmware crashes (e.g., NMI_INTERRUPT_UNKN...

CVE-2026-64175

在 Linux 内核 iwlwifi 驱动的 mld 子模块中,当固件崩溃(例如 Intel BE201 Wi-Fi 7 设备上的 NMI_INTERRUPT_UNKNOWN)进入重启流程时,驱动设置 mld->fw_status.in_h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() cfg80211_merge_profile() reassembles a Multi-...

CVE-2026-64174

该漏洞存在于Linux内核的cfg80211无线配置子系统。函数cfg80211_merge_profile()用于重组在多BSSID元素中分段传输的非传输BSS配置文件。其while循环内部调用了cfg80211_get_profile_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布LOW

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not call map->ops->elt_free() if elt_alloc() fails In paths where tracing_map_elt_alloc() faile...

CVE-2026-64173

该漏洞存在于 Linux 内核的 tracing 模块中。在 tracing_map_elt_alloc() 函数分配元素失败的情况下,错误处理路径会调用 map->ops->elt_free() 来释放之前分配的资源。然而,由于 elt_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) Hygon Family 18h CPUs are der...

CVE-2026-64172

该漏洞影响 Linux 内核的 KVM 子系统,具体是 SVM (AMD 虚拟化) 中的 AVIC (Advanced Virtual Interrupt Controller) IPI (处理器间中断) 虚拟化功能。Hygon Famil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_mutex_lock() fails, the function returns...

CVE-2026-64171

该漏洞存在于Linux内核的I2C Tegra驱动中(drivers/i2c/busses/i2c-tegra.c)。在函数tegra_i2c_xfer_msg()中,驱动先调用pm_runtime_get_sync()获取运行时PM引用计

历史摘要 · 未重新核验 · NVD

威胁情报2026-07-20 发布INFO

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-07-20 发布INFO

Cloud ManagerManage your cloud computing services

Cloud ManagerManage your cloud computing services

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-07-20 发布INFO

See all Cloud Computing

See all Cloud Computing

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-07-20 发布INFO

智利银行在勒索软件攻击后关闭所有分行

智利银行在勒索软件攻击后关闭所有分行

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-07-20 发布INFO

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-07-20 发布INFO

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-07-20 发布INFO

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-07-20 发布INFO

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-07-20 发布INFO

CrowdStrike Services and Agentic MDR Put the Agentic SOC in Reach

CrowdStrike Services and Agentic MDR Put the Agentic SOC in Reach

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-07-20 发布INFO

Threat Hunting & Intel

Threat Hunting & Intel

历史摘要 · 未重新核验 · CrowdStrike