2026-09-17 归档

今日共收录 2425 条安全情报，包含 1381 个 CVE，651 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-te...

CVE-2026-89873

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link In v4l2_fwnode_parse_link(), the remote endpo...

CVE-2026-89872

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure kthread_run() returns an ERR...

CVE-2026-89871

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: media: zoran: Avoid freeing a registered video_device twice zoran_init_video_device() installs zoran_vdev_r...

CVE-2026-89870

In the Linux kernel, the following vulnerability has been resolved: media: zoran: Avoid freeing a registered video_devi

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disable_irq() during power-off The IRQ is registered as a threaded IRQ. Using disab...

CVE-2026-89869

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disable_irq() during power-o

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stop_streaming When stop_streaming is called, an infinite loop...

CVE-2026-89868

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stop_s

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued Decoder instances sharing a VP...

CVE-2026-89867

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Defer job_finish() only

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware...

CVE-2026-89866

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before set

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers The FRU and I2C bsg handlers stage their transfe...

CVE-2026-89865

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg h

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound i2c->length in I2C bsg handlers struct qla_i2c_access carries a 16-bit length field al...

CVE-2026-89864

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound i2c->length in I2C bsg handler

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix BSG job leak on validate flash image error path qla28xx_validate_flash_image() returns Q...

CVE-2026-89862

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix BSG job leak on validate flash i

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() In the format 1 path, the virtual po...

CVE-2026-89861

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport reference in qla24xx_repo

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abort_work once at submission qla_nvme_fcp_abort() and qla_nvme_ls_abort() r...

CVE-2026-89860

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abort_work once at s

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00_do_dport_diagnostics() allocates th...

CVE-2026-89859

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avo

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() qla2x00_update_fru_versions() copies the ...

CVE-2026-89858

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00_update_

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation ha->msix_count is u16, but ha->max_req_...

CVE-2026-89856

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clamp MSI-X derived queue counts to

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize flash version read in reset handler The "update cache versions without reset" sysf...

CVE-2026-89855

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize flash version read in rese

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix cs84xx use-after-free on host teardown qla84xx_put_chip() drops the last reference to ha...

CVE-2026-89854

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix cs84xx use-after-free on host te

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump qla2x00_free_fce_trace() freed and cleared...

CVE-2026-89853

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace use-after-free during

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() The mbx_cmd_t is allocated on the stack ...

CVE-2026-89852

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero mailbox struct in qla2x00_get_f

历史摘要 · 未重新核验 · NVD

#cve