perf: Fix perf_pmu_migrate_context() leaving events behind
CVE-2026-99187
perf: Fix perf_pmu_migrate_context() leaving events behind
2026-10-30 归档
今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture
CVE-2026-99182
ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture
autofs: ignore notification errors from a replaced pipe
CVE-2026-99181
autofs: ignore notification errors from a replaced pipe
unicode: free the map after a grace period
CVE-2026-99180
unicode: free the map after a grace period
watch_queue: Fix note pool publication race in watch_queue_set_size()
CVE-2026-99179
watch_queue: Fix note pool publication race in watch_queue_set_size()
x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context
CVE-2026-99178
x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context
KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry
CVE-2026-99176
KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry
Stable Channel Update for Desktop
CVE-2026-119260 · CVE-2026-119261 · CVE-2026-119262 · CVE-2026-119263 · CVE-2026-119264 · CVE-2026-119265 · CVE-2026-119266 · CVE-2026-119267 · CVE-2026-119268 · CVE-2026-119269 · CVE-2026-119270 · CVE-2026-119271 · CVE-2026-119272 · CVE-2026-76024 · CVE-2026-76025 · CVE-2026-76026 · CVE-2026-76027 · CVE-2026-76028 · CVE-2026-76029 · CVE-2026-76030 · CVE-2026-76031
The Stable and Extended Stable channel has been updated to 156.0.8078.79/.80 for Windows and Mac and 156.0.8078.79 to Li
decode-uri-component provides a more robust alternative to decodeURIComponent. Prior to 0.5.1, decodeUriComponent in index.js falls back to customDecodeURIComponent after native...
CVE-2026-118664
decode-uri-component provides a more robust alternative to decodeURIComponent. Prior to 0.5.1, decodeUriComponent in ind
Vite is a frontend tooling framework for JavaScript. From 6.4.4 until 6.4.5, the Vite development server can evaluate server.fs.deny before stripping loader query parameters suc...
CVE-2026-118662
Vite is a frontend tooling framework for JavaScript. From 6.4.4 until 6.4.5, the Vite development server can evaluate se
Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence
Cedar users must be using all of the following features to be affected by this advisory: JSON format policies, policy te
PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets
### Summary During the resource pack stage of logging in, after the server sends `ResourcePackStackPacket`, a malicious
Discord to let search engines index public server messages
Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to us
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network
ext4: free the sbi after a grace period
CVE-2026-99174
ext4: free the sbi after a grace period
ipc: drop the mqueue mount with kern_unmount() on setup failure
CVE-2026-99172
ipc: drop the mqueue mount with kern_unmount() on setup failure
ntfs3: free the sbi after a grace period
CVE-2026-99171
ntfs3: free the sbi after a grace period
futex: Fix mm reuse handling for FUT_OFF_MMSHARED
CVE-2026-99169
futex: Fix mm reuse handling for FUT_OFF_MMSHARED
net/sched: fix use-after-free in __tcf_action_put()
CVE-2026-99167
net/sched: fix use-after-free in __tcf_action_put()
net: rds: fix uninitialized trans dereference in CM event handler
CVE-2026-99166
net: rds: fix uninitialized trans dereference in CM event handler