Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()
CVE-2026-98204
Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()
2026-10-08 归档
今日共收录 832 条安全情报，包含 0 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound
CVE-2026-96990
Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound
wifi: cfg80211: don't free driver-owned scan requests
CVE-2026-98341
wifi: cfg80211: don't free driver-owned scan requests
wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()
CVE-2026-98307
wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()
net/packet: clear RX owner on VNET header error
CVE-2026-98233
net/packet: clear RX owner on VNET header error
Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame
CVE-2026-94637
Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame
net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value
CVE-2026-98236
net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value
wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown
CVE-2026-98192
wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown
smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
CVE-2026-98171
smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS
CVE-2026-98363
firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS
Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count
CVE-2026-63772
Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count
RDMA/rtrs: guard against null kobj name
CVE-2026-98355
RDMA/rtrs: guard against null kobj name
net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()
CVE-2026-98238
net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()
Pump-and-Dump meets Honeypot Tokens: Detection and Analysis of Telegram Bait-and-Trap Schemes
While Pump-and-Dump schemes have been extensively studied on centralized exchanges (CEXs), how they operate in decentral
The Price of Privacy: Randomness Complexity of Graph-Based Multi-Secret Sharing
We study the randomness required to share possibly correlated secret bits among parties connected by a graph. A dealer p
Hybrid Hierarchical Runtime Verification for Edge-IoT Security: Combining MonPoly and RTLola
Security monitoring of edge-IoT fleets faces three structural challenges. (i) A per-node monitor is cheap but cannot see
Hierarchical Security Monitoring for Edge-IoT: A Formal Methods Approach
Cyber resiliency in edge-IoT deployments is fundamentally an economic problem: detection must keep critical processes op
Automotive Hardware Attacks: An Architect's Guide to TARA
Threat analysis and risk assessment (TARA) according to ISO/SAE 21434 treats implementation-level hardware attacks incon
SwarmReconGuard: Black-Box Detection of Distributed Collective Reconnaissance by Individually Benign-Looking Agent Populations
Autonomous and agentic clients can distribute reconnaissance across many identities so that each request remains valid,
TwinGuard-Lite: A Rule-Based State-Admission Gateway for Generative Patient Digital Twins
Future generative patient digital twins may combine longitudinal health records with language-model agents and keep info