bpf: Reject dev-bound-only programs on other devices
CVE-2026-98382
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other device
2026-10-10 归档
今日共收录 1383 条安全情报，包含 534 个 CVE，469 篇安全通告，以及 100 篇研究论文。
← 返回归档列表veth: manage XDP program pointers during channel resize
CVE-2026-98381
In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel re
net/sched: reject IDR error pointers when deleting actions
CVE-2026-98380
In the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error pointers when deleting
netfilter: ip6t_rpfilter: reject routes without inet6_dev
CVE-2026-98379
In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rpfilter: reject routes without ine
bpf: Skip unsettled links in link iterator
CVE-2026-98378
In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpf_lin
vlan: require the MAC header to be present in __vlan_insert_inner_tag()
CVE-2026-98377
In the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to be present in __vla
bpf: Use array_map_meta_equal for percpu array inner map replacement
CVE-2026-98376
In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu array inne
Type confusion in the device_deinit system call allows user-mode threads to execute arbitrary kernel code
CVE-2026-19575
The user-mode verification handler for the device_deinit() system call, z_vrfy_device_deinit() in kernel/device.c, valid
Integer overflow in dynamic kernel object allocation allows user-mode threads to corrupt the kernel heap
CVE-2026-19569
dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kern
ARM64 MMU can assign an in-use ASID to a new memory domain, breaking user-mode memory isolation
CVE-2026-19574
The ARM64 MMU back-end allocated address space identifiers (ASIDs) for memory domains with a bare round-robin counter in
Out-of-bounds write in LE Audio Broadcast Sink when copying BASE subgroup metadata into the BASS receive state
CVE-2026-19570
The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basi
xen/netfront: drop RX packets with a short Ethernet header
CVE-2026-98375
In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet
Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts
CVE-2026-101028
Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot re
CVE-2026-107911
CVE-2026-107911
A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 all
CVE-2026-107914
CVE-2026-107914
Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when deliverin
CVE-2026-7827
CVE-2026-7827
A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decod
CVE-2026-107890
CVE-2026-107890
OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation re
CVE-2026-107886
CVE-2026-107886
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces
CVE-2026-107885
CVE-2026-107885
OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cups
SumatraPDF — Windows command-line argument injection in AI selection-translate
CVE-2026-107802
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pas