2026-09-24 归档

今日共收录 1600 条安全情报,包含 683 个 CVE,518 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-09-23 发布INFO

perf/x86/amd/core: Avoid enabling BRS from the SVM reload path

CVE-2026-72325

perf/x86/amd/core: Avoid enabling BRS from the SVM reload path

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

mmc: vub300: fix use-after-free on probe failure

CVE-2026-72073

mmc: vub300: fix use-after-free on probe failure

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

kernfs: link kn to its parent before the LSM init hook

CVE-2026-74342

kernfs: link kn to its parent before the LSM init hook

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

xsk: drain continuation descs after overflow in xsk_build_skb()

CVE-2026-74559

xsk: drain continuation descs after overflow in xsk_build_skb()

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

nvmet-tcp: fix page fragment cache leak in error path

CVE-2026-74386

nvmet-tcp: fix page fragment cache leak in error path

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

btrfs: fix deadlock cloning inline extent when using flushoncommit

CVE-2026-74318

btrfs: fix deadlock cloning inline extent when using flushoncommit

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT

CVE-2026-74307

ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

Bluetooth: 6lowpan: avoid untracked enable work

CVE-2026-72337

Bluetooth: 6lowpan: avoid untracked enable work

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

md/raid1,raid10: fix deadlock in read error recovery path

CVE-2026-74375

md/raid1,raid10: fix deadlock in read error recovery path

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

md/raid10: fix writes_pending leak on write request failures

CVE-2026-72439

md/raid10: fix writes_pending leak on write request failures

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

ASoC: topology: Check PCM and DAI name strings before use

CVE-2026-74291

ASoC: topology: Check PCM and DAI name strings before use

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

btrfs: skip global block reserve accounting for rescue mounts

CVE-2026-74571

btrfs: skip global block reserve accounting for rescue mounts

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

binfmt_misc: restore write access when removing an entry

CVE-2026-74487

binfmt_misc: restore write access when removing an entry

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx

CVE-2026-74560

xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

xsk: reclaim invalid Tx descriptors in ZC batch path

CVE-2026-74558

xsk: reclaim invalid Tx descriptors in ZC batch path

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()

CVE-2026-74543

net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs

CVE-2026-83621

ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

ntopng: Missing Authorization on System Configuration Backup Download and Listing

CVE-2026-84990

ntopng: Missing Authorization on System Configuration Backup Download and Listing

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API

CVE-2026-82412

ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-23 发布INFO

Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation

CVE-2026-53940

Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation

历史摘要 · 未重新核验 · Microsoft MSRC