net/sched: fix use-after-free in __tcf_action_put()
CVE-2026-99167
net/sched: fix use-after-free in __tcf_action_put()
2026-10-29 归档
今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表net: rds: fix uninitialized trans dereference in CM event handler
CVE-2026-99166
net: rds: fix uninitialized trans dereference in CM event handler
tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields
CVE-2026-99163
tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields
i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
CVE-2026-99161
i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies
CVE-2026-99157
scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies
scsi: st: Fix use-after-free race between st_remove() and st_open()
CVE-2026-99156
scsi: st: Fix use-after-free race between st_remove() and st_open()
scsi: xen/scsifront: Check for a NULL shadow entry on a backend response
CVE-2026-99155
scsi: xen/scsifront: Check for a NULL shadow entry on a backend response
scsi: libiscsi: Reject a negative task index from parse_pdu_itt
CVE-2026-99154
scsi: libiscsi: Reject a negative task index from parse_pdu_itt
scsi: libiscsi: Validate the ITT reflected in a Reject PDU
CVE-2026-99153
scsi: libiscsi: Validate the ITT reflected in a Reject PDU
scsi: libiscsi: Validate the task named by a management response
CVE-2026-99152
scsi: libiscsi: Validate the task named by a management response
drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr
CVE-2026-99150
drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr
drm/exec: don't immediately add prelocked obj to array of locked objs
CVE-2026-99147
drm/exec: don't immediately add prelocked obj to array of locked objs
Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to enumerate usernames by submitting regex patterns to POST /a...
CVE-2026-114401
Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to en
A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Mach...
CVE-2026-116099
A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the f
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
CVE-2026-85874
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-85879
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevat
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85884
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized at
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
CVE-2026-83845
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locall
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83848
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges l
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.
CVE-2026-83849
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.