2026-09-04 归档

今日共收录 1362 条安全情报,包含 399 个 CVE,552 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
安全公告2026-09-03 发布INFO

af_packet: Don't send zero-byte data in tpacket_snd().

CVE-2026-80742

In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't send zero-byte data in tpacket_snd

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

drm/log: Fix out-of-bounds read on empty message length

CVE-2026-80741

In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message le

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

drm/log: Fix infinite loop when scale is too large for display

CVE-2026-80740

In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

CVE-2026-80739

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiri

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie

CVE-2026-80738

In the Linux kernel, the following vulnerability has been resolved: bpf: Check sk_state before sk_protocol in bpf_tcp_*

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

serial: amba-pl011: synchronize DMA teardown

CVE-2026-80737

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaen

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

thunderbolt: Fix bandwidth group reservation indexing

CVE-2026-80736

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexi

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

net: remove WARN_ON_ONCE() from sk_mc_loop()

CVE-2026-80733

In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from sk_mc_loop() sk_mc

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

ata: pata_sl82c105: fix bridge revision use-after-free

CVE-2026-80732

In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-f

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header

CVE-2026-80731

In the Linux kernel, the following vulnerability has been resolved: net: remove CAP_SYS_RAWIO zero-padding in dev_valid

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

ring-buffer: Fix crash passing ERR_PTR to kthread_stop()

CVE-2026-80730

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix crash passing ERR_PTR to kthread_s

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

mm/huge_memory: initialise workingset state before folio split

CVE-2026-80729

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: initialise workingset state before

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

Revert "drm/amdgpu: fix aperture mapping leak"

CVE-2026-80728

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" dev

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

x86/mce: Set up the polling timer before CMCI discovery

CVE-2026-80727

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI disco

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

Cheshire Cat AI Memory Collection Endpoint Information Disclosure

CVE-2026-85093

Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retriev

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

LiME through 1.12.0 Arbitrary File Overwrite via Symlink Following

CVE-2026-85092

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use O_NOFOLLOW when opening the oper

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate

CVE-2026-85091

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when proces

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

FreeRDP before 3.31.0 Heap Out-of-Bounds Read via AVC444

CVE-2026-85090

FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the general_ChromaV1ToYUV444 function during A

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-03 发布INFO

FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

CVE-2026-85089

FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info PDU reserv

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-02 发布INFO

Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

CVE-2026-84851

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated a

历史摘要 · 未重新核验 · OSV.dev