2026-09-05 归档

今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-09-04 发布INFO

Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number} in Roskus Prospero Flow CRM before 5.15.11 allows an unauthenticated attacke...

CVE-2026-82911

Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number} in Roskus Prospero

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp rxe_qp_from_attr() handles IB_QP_MAX_DEST...

CVE-2026-80864

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_AT

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix OOB in free_rd_atomic_resources() free_rd_atomic_resources() iterates using qp->attr.max_dest...

CVE-2026-80863

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix OOB in free_rd_atomic_resources() fr

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page_frag_cache nvme uses page_frag_cache to preallocate PDU for each preallocated r...

CVE-2026-80862

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page_frag_cache nvme uses p

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: bail out of setup if the controller is inaccessible xhci_gen_setup() locates the operational reg...

CVE-2026-80861

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: bail out of setup if the controller is i

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 ("fuse: clear intr_entry in fuse_rese...

CVE-2026-80860

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuse_block_alloc() reads fch->initialized and th...

CVE-2026-80859

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring re

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuse_uring_create_queue() initializes a fuse_ring_queu...

CVE-2026-80858

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantic

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free The abort_on_kill path in request_wai...

CVE-2026-80857

In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FR_FINISHED on abort_on_kill to prev

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fuse_do_setattr() takes filemap_invalidate_lock...

CVE-2026-80856

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open O_TRUNC DAX failure fuse_open() takes filemap_invalidate_lock() for ...

CVE-2026-80855

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open O_TRUNC DAX

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: keep port count until LUN teardown completes tcm_usbg_drop_nexus() permits session remo...

CVE-2026-80854

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: keep port count until LUN teard

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SNP-enabled hosts When {de,en}crypting memory of an S...

CVE-2026-80853

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: tls: device: fix out-of-bounds write in tls_append_frag() Found with syzkaller and a local syzbot instance ...

CVE-2026-80852

In the Linux kernel, the following vulnerability has been resolved: tls: device: fix out-of-bounds write in tls_append_

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context updates PDP contexts can be deleted through GTP_CMD_DELPDP or while the GTP netw...

CVE-2026-80851

In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context updates PDP contexts ca

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: tcp: fix AO info use-after-free in tcp_ao_connect_init() tcp_v4_connect() adds a SYN-SENT socket to the eha...

CVE-2026-80850

In the Linux kernel, the following vulnerability has been resolved: tcp: fix AO info use-after-free in tcp_ao_connect_i

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of current_key on reconnect to another peer tcp_inbound_ao_hash() is called ...

CVE-2026-80849

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of current_key on re

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: fix UAF during close ZDI reported and analyzed a race condition during close for espintcp s...

CVE-2026-80848

In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: fix UAF during close ZDI reported

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCP_MIN_MSS tcp_select_initial_window() assumes that callers never pass an MSS s...

CVE-2026-80847

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCP_MIN_MSS tcp_select_

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-04 发布INFO

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser....

CVE-2026-80846

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress devic

历史摘要 · 未重新核验 · NVD

#cve