drm/msm/dsi: Drop dev_pm_opp_set_rate(0)
CVE-2026-90362
drm/msm/dsi: Drop dev_pm_opp_set_rate(0)
2026-09-20 归档
今日共收录 942 条安全情报，包含 169 个 CVE，438 篇安全通告，以及 68 篇研究论文。
← 返回归档列表ocfs2: validate DIO orphan slot during inode read
CVE-2026-90204
ocfs2: validate DIO orphan slot during inode read
pnfs/blocklayout: Fix device leaks on parse failure
CVE-2026-90150
pnfs/blocklayout: Fix device leaks on parse failure
wifi: nl80211: clean up color-change beacon data on errors
CVE-2026-90346
wifi: nl80211: clean up color-change beacon data on errors
nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request
CVE-2026-90411
nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request
usb: gadget: r8a66597: avoid double free of ep0_req in probe error path
CVE-2026-93141
usb: gadget: r8a66597: avoid double free of ep0_req in probe error path
RDMA/rvt: Return NULL after port allocation failure
CVE-2026-93104
RDMA/rvt: Return NULL after port allocation failure
bpf: Zero queue and stack outputs on lock failure
CVE-2026-92520
bpf: Zero queue and stack outputs on lock failure
bpf: Fix use-after-free on mm_struct in bpf_find_vma()
CVE-2026-93137
bpf: Fix use-after-free on mm_struct in bpf_find_vma()
iommu/dma: Check atomic pool allocation result directly
CVE-2026-90388
iommu/dma: Check atomic pool allocation result directly
wifi: mac80211_hwsim: avoid NULL skb in stop queue drain
CVE-2026-93149
wifi: mac80211_hwsim: avoid NULL skb in stop queue drain
firewire: core: fix memory leak in error path of build_tree()
CVE-2026-90213
firewire: core: fix memory leak in error path of build_tree()
ksmbd: validate ipc response length before dereferencing its fields
CVE-2026-90170
ksmbd: validate ipc response length before dereferencing its fields
net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue
CVE-2026-90109
net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue
cxl/mbox: Clamp mailbox output allocation to the payload size
CVE-2026-93186
cxl/mbox: Clamp mailbox output allocation to the payload size
mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()
CVE-2026-93048
mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()
ksmbd: safely discard unregistered deferred locks
CVE-2026-90156
ksmbd: safely discard unregistered deferred locks
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
CVE-2026-58138
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The
Obot: Server-Side Request Forgery via remote MCP server URL
## Summary In affected versions, the URL of a remote MCP server is attacker-controlled at registration and is fetched s
Obot: MCP Registry API readable without authentication
## Summary In affected versions, enabling registry authentication (`OBOT_SERVER_ENABLE_REGISTRY_AUTH=true`) does not ac