2026-09-18 归档

今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size smb_check_perm_dacl() validates that the DACL fit...

CVE-2026-90153

In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound smb_check_perm_dacl() ACE walks by DAC

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix session leak in ksmbd_session_register() See the procedure below: smb2_sess_setup ks...

CVE-2026-90152

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix session leak in ksmbd_session_regis

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client allocation failure nfs4_alloc_client() allocates an NFSv4.0 call...

CVE-2026-90151

In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client allocati

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: pnfs/blocklayout: Fix device leaks on parse failure bl_parse_concat() and bl_parse_stripe() allocate a chil...

CVE-2026-90150

In the Linux kernel, the following vulnerability has been resolved: pnfs/blocklayout: Fix device leaks on parse failure

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers flexfiles accepts NFSv4.0 data servers, but ...

CVE-2026-90149

In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 d

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() When nfs4_add_lease() races...

CVE-2026-90148

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to nfs4_delete

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() devm_clk_get_optional_enabled_with_ra...

CVE-2026-90147

In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devm_clk_get_optional_e

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into dev_xdp_install() bpf_xdp_link_update() calls dev_xdp_install() directly ...

CVE-2026-90146

In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into dev_xdp_install()

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed Previously, hinic3_send...

CVE-2026-90145

In the Linux kernel, the following vulnerability has been resolved: hinic3: Fix skb linearization mismatch and drop skb

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL deref in dpll_device_ops() during teardown race When the last owner of a dpll device unregis...

CVE-2026-90144

In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL deref in dpll_device_ops() during te

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF parser kcm_parse_func_strparser() calls bpf_prog_run_pin_on_...

CVE-2026-90143

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF pars

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix resize of the RX ring When a AF_XDP socket is attached, the virtnet_rx_resize should resize...

CVE-2026-90142

In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix resize of the RX ring When a AF_XD

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ip_vs_ftp_get_addrport() accumulates decimal ...

CVE-2026-90141

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/addre

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad ("fuse: fix UAF in rcu pathwa...

CVE-2026-90140

In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fuse: check for NULL root inode in fuse_fill_super_submount fuse_iget() can return NULL when its inode allo...

CVE-2026-90139

In the Linux kernel, the following vulnerability has been resolved: fuse: check for NULL root inode in fuse_fill_super_

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's sk_err in vsock_accept() Syzbot reported an issue which can be reproduced...

CVE-2026-90138

In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's sk_err in vsock_a

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix password encoding bounds check The password PSWD_ENCODINGS parser reads passw...

CVE-2026-90137

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix password encoding bou

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Reject negative power cap writes in hwmon hsmp_hwmon_write() takes the user-supplied...

CVE-2026-90136

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Reject negative power cap wr

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() sashiko is reporting that trying to read /sys...

CVE-2026-90135

In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to alloc_ne

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local_page() usage in compress Several compressed I/O paths discard the address returned by ...

CVE-2026-90134

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local_page() usage in compress Seve

历史摘要 · 未重新核验 · NVD

#cve