iomap: add a separate bio_set for iomap_split_ioend
CVE-2026-80720
In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend
2026-08-29 归档
今日共收录 1687 条安全情报，包含 687 个 CVE，604 篇安全通告，以及 114 篇研究论文。
← 返回归档列表mm: mglru: fix stale batch updates after memcg reparenting
CVE-2026-80719
In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg repa
sctp: validate Adaptation Indication parameter length
CVE-2026-80717
In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter leng
drm/amd/display: use proper context for logging
CVE-2026-80704
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging Th
erofs: ensure valid f_path for page cache sharing
CVE-2026-80697
In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid f_path for page cache sharing
mm/util: don't read __page_2 for order-1 folios in snapshot_page()
CVE-2026-80685
In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read __page_2 for order-1 folios in
perf tools: Use perf_env__get_cpu_topology() in machine__resolve()
CVE-2026-80670
In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perf_env__get_cpu_topology() in mac
crypto: ccp - Treat zero-length cert chain as query for blob lengths
CVE-2026-80652
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query
wifi: wlcore: enable the right set of ciphers
CVE-2026-80641
In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The
net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
CVE-2026-80630
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_red
veth: fix NAPI leak in XDP enable error path
CVE-2026-80613
In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path Durin
ACPI: processor_idle: Mark LPI enter functions as __cpuidle
CVE-2026-80611
In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Mark LPI enter functions as _
perf/x86/amd/lbr: Fix kernel address leakage
CVE-2026-80602
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A use
CVE-2026-38093
CVE-2026-38093
file_picker (aka flutter_file_picker) for Flutter, all versions through 10.3.10, is vulnerable to path traversal (CWE-22
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication tokens used by the web management interface are insuffic...
CVE-2026-76179
An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication
Breaking Through Binaries: Compiler-quality Instrumentation for Better Binary-only Fuzzing.
这篇论文针对二进制程序模糊测试（binary-only fuzzing）中的覆盖率反馈质量不佳问题，提出了一种新的编译器级插桩方法，命名为“Breaking Through Binaries”（简称BTB）。传统上，对于没有源代码的二进制程
StepStone: LLM-Based GPU Kernel Driver Fuzzing via User-Space Libraries.
本文（arXiv 论文，题目为《StepStone: LLM-Based GPU Kernel Driver Fuzzing via User-Space Libraries》）提出了一种基于大语言模型（LLM）的 GPU 内核驱动模糊测试
MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation.
本文提出了一种名为 MetaBreak 的新型越狱攻击方法，针对在线大语言模型（LLM）服务。与常规 token 不同，特殊 token 是在 LLM 微调过程中人为创建、用于标注结构化对话的元数据，对模型生成连贯且上下文相关的回复起关键指