2026-10-31 归档

今日共收录 3279 条安全情报,包含 2996 个 CVE,94 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-08-15 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb->dev refcnt until afte...

CVE-2026-72463

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumpti

来源摘录 · NVD

漏洞预警2026-08-15 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed...

CVE-2026-72398

In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking

来源摘录 · NVD

漏洞预警2026-08-15 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pci_dev LUT The PF SR-IOV enable path caches VF pci_dev pointers in dpiring_to...

CVE-2026-72329

In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pci_dev LUT The PF SR

来源摘录 · NVD

漏洞预警2026-08-15 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_lookup: fix catchall element handling with inverted lookups nft_lookup_eval() decides whethe...

CVE-2026-72320

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_lookup: fix catchall element handlin

来源摘录 · NVD

漏洞预警2026-08-15 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim reports some ...

CVE-2026-72288

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt aff

来源摘录 · NVD

漏洞预警2026-08-15 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relative LCN ...

CVE-2026-72200

In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow

来源摘录 · NVD

漏洞预警2026-08-15 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers nvmet_execute_auth_receive() trusts the AUTH_RECEIVE allocati...

CVE-2026-72130

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers nvme

来源摘录 · NVD

漏洞预警2026-08-15 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if (neras &&...

CVE-2026-72098

In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation

来源摘录 · NVD

漏洞预警2026-08-10 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb->prev after async crypto steals a GSO segment skb_gso_segment() leaves the segment list...

CVE-2026-68426

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb->prev after async crypto steals

来源摘录 · NVD

漏洞预警2026-08-10 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2_oplock_break_noti() and smb2_lease_break_noti()...

CVE-2026-68381

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notificat

来源摘录 · NVD

漏洞预警2026-08-10 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbd_vfs_kern_path_create The SMB2 open lookup is rooted at the share with L...

CVE-2026-68083

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbd_vfs_kern_path_c

来源摘录 · NVD

漏洞预警2026-07-19 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can merge glob...

CVE-2026-63825

In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G...

CVE-2026-113812

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised in

来源摘录 · NVD

漏洞预警2026-01-13 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: fix race on m_flags in vfs_cache ksmbd maintains delete-on-close and pending-delete state in ks...

CVE-2025-68809

In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: fix race on m_flags in vfs_cache ksmbd

来源摘录 · NVD

漏洞预警2025-12-24 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port ha...

CVE-2025-68745

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, le...

CVE-2026-87861

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previous

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the `CONNECT` tunnel req...

CVE-2026-86414

An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) t

来源摘录 · NVD

漏洞预警2026-10-20 发布CRITICAL

When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second o...

CVE-2026-86413

When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl coul

来源摘录 · NVD

威胁情报2026-10-30 发布INFO

Critical Linux kernel flaw allows remote root attacks on MPTCP servers

Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauth

来源摘录 · BleepingComputer

威胁情报2026-10-30 发布INFO

Trezor warns of suspected crypto-theft implant in hardware wallet

Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a T

来源摘录 · BleepingComputer