2026-09-18 归档

今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: software node: Fix software_node_get_reference_args() with index -1 The bounds check for the index passed t...

CVE-2026-93046

In the Linux kernel, the following vulnerability has been resolved: software node: Fix software_node_get_reference_args

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject arena frees below the arena base bpf_arena_free_pages() accepts scalar arena addresses. The run...

CVE-2026-93045

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject arena frees below the arena base bpf_a

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for arena-related insns Since the interpreter does not support the arena...

CVE-2026-93044

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for arena-relate

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for gotox insn The interpreter does not recognize the BPF_JMP|BPF_JA|BPF...

CVE-2026-93043

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for gotox insn

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Terminate all descriptors without callbacks The DMA Engine client documentation says in...

CVE-2026-93042

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Terminate all descriptors witho

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Serialize abort state updates dw_edma_abort_interrupt() drops vc.lock before changing r...

CVE-2026-93041

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Serialize abort state updates

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: Keep link pointers valid on realloc failure meson_card_reallocate_links() grows the DAI link a...

CVE-2026-93039

In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: Keep link pointers valid on realloc fa

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad5686: missing NULL check on match data Verify that chip_info pointer is not NULL. If a user bin...

CVE-2026-93038

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad5686: missing NULL check on match data

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Propagate sdma_txinit_ahg() errors set_txreq_header_ahg() ignores the return value of sdma_txini...

CVE-2026-93037

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Propagate sdma_txinit_ahg() errors set_

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary OS commands as the web server use...

CVE-2026-92980

HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrato

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] For a user QP, qp->sq.queue is a ring the...

CVE-2026-92525

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate num_sge/cur_sge before indexing

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() When its_irq_gic_domain_alloc() fails, the f...

CVE-2026-92524

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_dom

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: validate dynamic counter attribute length RDMA_NLDEV_ATTR_STAT_HWCOUNTERS is a nested attribute...

CVE-2026-92523

In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: validate dynamic counter attribute leng

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and _MAT reco...

CVE-2026-92522

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root acpi_pci_root_add() assigns the fresh...

CVE-2026-92521

In the Linux kernel, the following vulnerability has been resolved: ACPI: PCI: Clear driver_data on all paths that free

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized ...

CVE-2026-92520

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix memory leak in bpf_jit_free When bpf_int_jit_compile() is called for subprograms, it return...

CVE-2026-92519

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix memory leak in bpf_jit_free When b

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix kernel stack corruption in tailcall with CFI When CONFIG_CFI_CLANG is enabled, prog->bpf_fu...

CVE-2026-92518

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix kernel stack corruption in tailcall

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf, riscv: Fix extable handling for arena load_acquire emit_atomic_ld_st() returns 1 to have build_body() ...

CVE-2026-92517

In the Linux kernel, the following vulnerability has been resolved: bpf, riscv: Fix extable handling for arena load_acq

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix offset warn check for bpf_res_spin_lock Sashiko pointed out correctly that the case statement for ...

CVE-2026-92516

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix offset warn check for bpf_res_spin_lock S

历史摘要 · 未重新核验 · NVD

#cve