2026-10-29 归档

今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。

← 返回归档列表

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a management response __iscsi_complete_pdu() fetches the task fo...

CVE-2026-99152

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a manage

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix data race and NULL deref on local->assoc_dev local->assoc_dev is shared between the associat...

CVE-2026-99134

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix data race and NULL deref on local->a

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sctp: validate chunk length in the inqueue parser SCTP chunks always include a four-byte generic header, bu...

CVE-2026-99128

In the Linux kernel, the following vulnerability has been resolved: sctp: validate chunk length in the inqueue parser

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes When running Hyper-V from Windows 11, KVM i...

CVE-2026-99120

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Cope with the SS bit being set in #NP

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: psp: do not inherit the Rx association on clone sk->psp_assoc sits past sk_dontcopy_end, so sock_copy(...

CVE-2026-99116

In the Linux kernel, the following vulnerability has been resolved: net: psp: do not inherit the Rx association on clon

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix unbound pool lifetime for pending pwqs KASAN reports a use-after-free of an unbound worker_p...

CVE-2026-99103

In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix unbound pool lifetime for pending pw

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to version 1.0.2, the built-in WebP decoder can cras...

CVE-2026-59959

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. P

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #cwe-369

漏洞预警2026-10-28 发布INFO

A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used b...

CVE-2026-93516

A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server b

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #cwe-416

漏洞预警2026-10-28 发布INFO

A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malicious X clients to crash or potential...

CVE-2026-93515

A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 c

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #cwe-416

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on error/exit paths In two places, current code forces vmbu...

CVE-2026-99216

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: prevent unregistering a power supply while a callback runs Once a power supply is regi...

CVE-2026-99215

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: prevent unregistering a power

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime Audio can be triggered by the HPD handler and start up ...

CVE-2026-99214

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handle the TCP_ESTABLISHED -> TCP_CLOSING transition on OP_RST...

CVE-2026-99213

In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handl

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure rds_rdma_cm_event_handler_cmn(...

CVE-2026-99212

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS st

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netlink: reset skb headers before unicast and multicast filtering Socket filters can use SKF_NET_OFF and SK...

CVE-2026-99211

In the Linux kernel, the following vulnerability has been resolved: netlink: reset skb headers before unicast and multi

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure rocket_probe() stores the return value from rocket_device_i...

CVE-2026-99210

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure ro

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe_evict_flags() switches on tbo->resource->mem_type to choo...

CVE-2026-99209

In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe_

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Zero OA buffer at allocation ttm_bo_type_kernel BOs are not guaranteed to be zeroed on allocatio...

CVE-2026-99208

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Zero OA buffer at allocation ttm_bo_typ

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayed_cmd_lock target_do_delayed_work() takes dev->delayed...

CVE-2026-99207

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding dela

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the...

CVE-2026-99206

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth upd

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux