Guixu: Valuation-Driven Data Discovery for Autonomous AI Agents with On-Chain Attestation
该论文提出了 Guixu，一个面向自主 AI 代理的、以数据价值评估驱动的数据发现系统。当前自主代理在执行模型训练、决策支持等下游任务时，高度依赖外部数据，但现有数据发现系统大多停留在检索层面：它们只能从异构数据源中返回候选数据集，却无法有
2026-08-12 归档
今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。
← 返回归档列表Private Anytime Selective-Risk Certification for Federated Retrieval-Augmented Generation: Guarantees and Empirical Limits
本文提出 Fed-SRC，一种面向联邦检索增强生成（Retrieval-Augmented Generation, RAG）的私有任意时间选择性风险认证框架。选择性风险证书的核心承诺是：所有被模型接受的输出都能满足预设的错误率目标。与以往依
A Bird's-Eye View on Security Considerations in RFCs
本论文对互联网工程任务组（IETF）发布的RFC文档中的“安全考量”（Security Considerations）章节进行了系统的实证分析。RFC是互联网核心协议的标准、备忘录及相关技术文档，自20世纪90年代初起，每份RFC都被要求包
A Combined Feature-Based Framework for Disguise and Spoofing Detection in Face Recognition Systems
该论文针对人脸识别系统中两类常见但通常被分开研究的失败模式：欺骗攻击（spoofing，即冒用他人照片或视频通过认证）和伪装（disguise，即合法用户因佩戴饰品、胡须、光照或姿态变化导致与注册模板不匹配而被拒绝）。作者提出了一个统一的框
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.
CVE-2026-6484
CVE-2026-6484 是一个影响 UEFI（统一可扩展固件接口）的安全漏洞，源于对特定固件卷（FV）缺少已验证启动（verified boot）机制。在 UEFI 的设计中，已验证启动用于确保固件组件在引导过程中未被篡改或替换。由于该
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps When btrfs_drop_extent_map_range() splits a...
CVE-2026-68442
该漏洞是Linux内核中btrfs文件系统的一个缺陷。在btrfs_drop_extent_map_range()函数分割extent map时，新的分割map通过局部变量'flags'继承了原始map的标志。此前的提交f86f7a75e2
In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d ("smp: Improve smp_call_function_s...
CVE-2026-68438
该CVE涉及Linux内核中smp_call_function_single()函数的CSD锁获取逻辑存在原子性缺陷，可能引发内核挂起和系统崩溃。具体而言，内核提交b0473dcd4b1d（“smp: Improve smp_call_fu
In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the correct CCCB For geometry jobs with a paired fragment job, ...
CVE-2026-68437
In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the cor
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time (most of it the two...
CVE-2026-68436
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for t...
CVE-2026-68435
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec comm
In the Linux kernel, the following vulnerability has been resolved: serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 ("se...
CVE-2026-68434
In the Linux kernel, the following vulnerability has been resolved: serial: 8250_mid: Fix NULL function pointer derefer
In the Linux kernel, the following vulnerability has been resolved: libceph: bound get_version reply decode to front len handle_get_version_reply() uses msg->front_alloc_len a...
CVE-2026-68433
In the Linux kernel, the following vulnerability has been resolved: libceph: bound get_version reply decode to front le
In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at most t...
CVE-2026-68432
In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP_NET_ADMIN in the device netns fo
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size ...
CVE-2026-68431
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requ
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUG_ON() There's no need to crash the kernel for this case. (cherry picke...
CVE-2026-68430
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUG_ON() There's
In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() A hotplug or link-los...
CVE-2026-68429
In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Handle torn-down topology gracefully in
A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data_from_avp of the file src/mme/mme-fd-path.c of the compon...
CVE-2024-14043
A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data
Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$...
CVE-2026-73250
Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer
calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a malicious EPUB, OPF, PDF, or similar file through program...
CVE-2026-73248
calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a
Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/core/runners/pebble/functions/HttpFunction.java passes the u...
CVE-2026-73247
Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/cor