2026-10-31 归档

今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-09-17 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before decoding decode_cb_sequence_args() allocates csa_rclists with kma...

CVE-2026-90104

In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before decoding

来源摘录 · NVD

#cve

漏洞预警2026-09-16 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list() ni_create_attr_list() allocates a fixed buf...

CVE-2026-90048

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in ni_create

来源摘录 · NVD

#cve

漏洞预警2026-09-16 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during close_lru reaping An nfs4_openowner left on nn->close_lru after ...

CVE-2026-90037

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during close_lr

来源摘录 · NVD

#cve

漏洞预警2026-09-16 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path nvme_alloc_ns() error path at out_unlink_ns removes ns fr...

CVE-2026-89972

In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path

来源摘录 · NVD

#cve

漏洞预警2026-09-16 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter KVM services local TLB flushes on "full" nes...

CVE-2026-89930

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Service local TLB flushes on failed nest

来源摘录 · NVD

#cve

漏洞预警2026-09-16 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2_tree_connect() ksmbd_tree_conn_connect() publishes a new ...

CVE-2026-89788

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2_t

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsd_setattr() checks whether a size update needs NFSD_MAY...

CVE-2026-89713

In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock n

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server sockaddr slot by xpt_locallen The nfsd_fh_verify and nfsd_fh_verify_err tracepo...

CVE-2026-89702

In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server sockaddr slot by xpt_lo

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke nfsd4_alloc_layout_stateid reads...

CVE-2026-89686

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on r

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY For an async COPY, nfsd4_copy() called nfs4_init_c...

CVE-2026-89676

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp->mask The NFSACL v2 SETACL path shares the decoder convention used by its v3...

CVE-2026-89672

In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp->mask The NFSACL v2

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp->mask nfsd3_proc_setacl() calls set_posix_acl() unconditionally for both ACL...

CVE-2026-89671

In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp->mask nfsd3_proc_se

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during delegation revoke A delegation stateid holds only a bare pointer...

CVE-2026-89659

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during delegati

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on session freed during unlock check_new_map() iterates mdsc->sessions[] a...

CVE-2026-89654

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on session freed d

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get_name ceph_get_name() copies the MDS-supplied name i...

CVE-2026-89652

In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_export_targets array for mds info v2/v3 ceph_mdsmap_decode() in fs/ceph/mdsmap.c reads num_...

CVE-2026-89650

In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_export_targets array for mds info v

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() coalesce_t2() computes data po...

CVE-2026-89633

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated Da

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect response whose byte count is too small CIFSTCon() bounds its strnlen() o...

CVE-2026-89631

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect response whose b

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: enforce krb5 token minimum length svcauth_gss_unwrap_priv() validates only an upper bo...

CVE-2026-89550

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: enforce krb5 token minimum len

来源摘录 · NVD

#cve

漏洞预警2026-09-11 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 gss_krb5_verify_mic_v2() reads the token...

CVE-2026-89537

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb

来源摘录 · NVD

#cve