drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE
CVE-2026-89800
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: clear the dirty flag when unwindi
2026-09-17 归档
今日共收录 2425 条安全情报，包含 1381 个 CVE，651 篇安全通告，以及 100 篇研究论文。
← 返回归档列表bpf: Disable preemption in bpf_get_stackid
CVE-2026-89799
In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_get_stackid The get
rpcrdma: arm rn_done before publishing the notification
CVE-2026-89798
In the Linux kernel, the following vulnerability has been resolved: rpcrdma: arm rn_done before publishing the notifica
power: supply: ab8500_fg: fix use-after-free on remove
CVE-2026-89797
In the Linux kernel, the following vulnerability has been resolved: power: supply: ab8500_fg: fix use-after-free on rem
mm/damon/core: avoid infinite kdamond_merge_regions() internal loop
CVE-2026-89796
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamond_merge_regions
PCI: Allow per function PCI slots to fix slot reset on s390
CVE-2026-89795
In the Linux kernel, the following vulnerability has been resolved: PCI: Allow per function PCI slots to fix slot reset
ksmbd: zero pipe read compound padding
CVE-2026-89794
In the Linux kernel, the following vulnerability has been resolved: ksmbd: zero pipe read compound padding Compound re
OpenMeter SQL Injection in ClickHouse-backed Meter Definitions
CVE-2026-8462
SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allo
ublk: clear VM_MAYWRITE on read-only ublk char device mmap
CVE-2026-89793
In the Linux kernel, the following vulnerability has been resolved: ublk: clear VM_MAYWRITE on read-only ublk char devi
Apache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT access
CVE-2026-82310
Apache Airflow FAB provider: deactivating a user account does not stop tokens issued to that account before deactivation
Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration
CVE-2026-86792
Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connectio
Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessions
CVE-2026-86462
Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate t
Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always false
CVE-2026-82311
Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions,
Apache Airflow Akeyless provider: Akeyless secrets backend: team-scope guard bypass via user-controlled key
CVE-2026-86465
Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled
ksmbd: prevent out-of-bounds reads in share config responses
CVE-2026-89792
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config
perf: Fix use-after-free when perf mmap() revival races with the last munmap()
CVE-2026-89791
In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() revival r
gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free
CVE-2026-89789
In the Linux kernel, the following vulnerability has been resolved: gtp: add synchronize_net() in gtp_newlink() error p
ksmbd: fix tree connection use-after-free in smb2_tree_connect()
CVE-2026-89788
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2_t
ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()
CVE-2026-89787
In the Linux kernel, the following vulnerability has been resolved: ext4: check dir entry fits before reading the hash
ext4: fix out-of-bounds read in ext4_read_inline_dir()
CVE-2026-89786
In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bounds read in ext4_read_inline_di