tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg
CVE-2026-80607
In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARN_ON_ONCE from parse_btf_
2026-08-29 归档
今日共收录 1687 条安全情报，包含 687 个 CVE，604 篇安全通告，以及 114 篇研究论文。
← 返回归档列表drm/xe/userptr: Hold notifier_lock for write on inject test path
CVE-2026-80606
In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifier_lock for write on inj
HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()
CVE-2026-80605
In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in p
HID: core: Fix OOB read in hid_get_report for numbered reports
CVE-2026-80604
In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for numbe
netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
CVE-2026-80603
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off-by
batman-adv: gw: acquire ethernet header only after skb realloc
CVE-2026-80601
In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after
batman-adv: dat: acquire ARP hw source only after skb realloc
CVE-2026-80600
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after s
batman-adv: dat: ensure accessible eth_hdr proto field
CVE-2026-80599
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth_hdr proto fi
ntfs3: fix out-of-bounds read in decompress_lznt
CVE-2026-80598
In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt d
mtd: maps: vmu-flash: fix NULL pointer dereference in initialization
CVE-2026-80597
In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference
Input: ims-pcu - only expose sysfs attributes on control interface
CVE-2026-80596
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on co
Input: ims-pcu - add response length checks
CVE-2026-80595
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The dr
Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing
CVE-2026-80594
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC
hwmon: (asus_atk0110) Check package count before accessing element
CVE-2026-80593
In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before ac
samples/damon/mtier: fail early if address range parameters are invalid
CVE-2026-80592
In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range pa
f2fs: fix listxattr handling of corrupted xattr entries
CVE-2026-80591
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr ent
inet: frags: strip GSO state from fragments before reassembly
CVE-2026-80590
In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before
The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path before using it to build a server-side verification reques...
CVE-2026-16947
The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path b
MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under th...
CVE-2026-55859
MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2db
A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a SASL-based login exchange a...
CVE-2026-81520
A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session ope