2026-10-31 归档

今日共收录 3279 条安全情报,包含 2996 个 CVE,94 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds add_changeset_property() links a ne...

CVE-2026-98855

In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after ch

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: of/overlay: only treat a positive changeset id as registered of_overlay_fdt_apply() stores the idr_alloc() ...

CVE-2026-98854

In the Linux kernel, the following vulnerability has been resolved: of/overlay: only treat a positive changeset id as r

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inet_gso_segment() or ipv6_gso_se...

CVE-2026-98853

In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: drop flowtable reference on init error path nft_flow_offload_init() bumps the ...

CVE-2026-98851

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: drop flowtable referen

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net/packet: prevent TX_RING byte count overflow tpacket_snd() drains every SEND_REQUEST frame in a TX ring ...

CVE-2026-98850

In the Linux kernel, the following vulnerability has been resolved: net/packet: prevent TX_RING byte count overflow tp

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state before requesting alarm IRQ devm_request_irq() enables the interrupt befor...

CVE-2026-98847

In the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state before requesting

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sctp: check RCV_SHUTDOWN after the sendmsg connect wait sctp_wait_for_connect() drops the socket lock while...

CVE-2026-98846

In the Linux kernel, the following vulnerability has been resolved: sctp: check RCV_SHUTDOWN after the sendmsg connect

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF The reload of 'vc' added by commit...

CVE-2026-98840

In the Linux kernel, the following vulnerability has been resolved: vc_screen: reload vc pointer before if (ret) in vcs

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: vt: skip screen update for DEC alignment test on backgroup consoles [BUG] Recently, we encountered a KASAN ...

CVE-2026-98838

In the Linux kernel, the following vulnerability has been resolved: vt: skip screen update for DEC alignment test on ba

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: unregister the input device when probe fails setup_card() registers the input device, whose na...

CVE-2026-98837

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: unregister the input device when probe

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is ex...

CVE-2026-98836

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Eac

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() with the master MTD __get_mtd_device() calls the master's _get_device() callb...

CVE-2026-98833

In the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() with the master MTD

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: of/overlay: don't leak fragment references when changeset init fails init_overlay_changeset() stores the nu...

CVE-2026-98831

In the Linux kernel, the following vulnerability has been resolved: of/overlay: don't leak fragment references when cha

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfx_hif_read_mib() copies reply->length bytes ...

CVE-2026-98830

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() devm_clk_get(&pdev->dev, "rtcref")'s retur...

CVE-2026-98825

In the Linux kernel, the following vulnerability has been resolved: rtc: mpfs: fix unchecked devm_clk_get() error point

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: preserve hidden-group beacon IE ownership A hidden-group probe-response entry borrows its b...

CVE-2026-98823

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: preserve hidden-group beacon IE own

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in unsigned storage so 0xFF does n...

CVE-2026-98819

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC record lengths Pa

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net/mctp: publish the mctp_dev only after it is initialised mctp_add_dev() links the new mctp_dev into dev-...

CVE-2026-98812

In the Linux kernel, the following vulnerability has been resolved: net/mctp: publish the mctp_dev only after it is ini

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: reclaim an empty proto on the error path Two racing tc filter add requests on the same ...

CVE-2026-98811

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: reclaim an empty proto on the e

来源摘录 · NVD

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister hci_unregister_dev() disables cmd_work and ...

CVE-2026-98809

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: don't drain cmd_sync backlog o

来源摘录 · NVD