2026-10-31 归档

今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT A broken/malicious port can transmit ...

CVE-2026-63959

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpci_maxim: validate header NDO a

来源摘录 · NVD

#cve

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: do not trigger BUG() on BH disabled context __get_vm_area_node() currently triggers a BUG() if ...

CVE-2026-63955

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: do not trigger BUG() on BH disabled con

来源摘录 · NVD

#cve

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: hpfs: fix a crash if hpfs_map_dnode_bitmap fails If hpfs_map_dnode_bitmap fails, the code would call hpfs_b...

CVE-2026-63954

In the Linux kernel, the following vulnerability has been resolved: hpfs: fix a crash if hpfs_map_dnode_bitmap fails I

来源摘录 · NVD

#cve

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page When migrate_vma_insert_huge_pmd_pa...

CVE-2026-63953

In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix pgtable leak in migrate_vma_

来源摘录 · NVD

#cve #cwe-401

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_writeback_endio A crash was observed in zram_writeback_endio due to a NULL...

CVE-2026-63951

In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_writeback_endio A

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size...

CVE-2026-63957

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption wit

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoin...

CVE-2026-63956

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: fix memory corruption with

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi_connector_change() The connector number in a UCSI CCI n...

CVE-2026-63958

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi

来源摘录 · NVD

#cve

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() wcove_read_rx_buffer() copi...

CVE-2026-63960

In the Linux kernel, the following vulnerability has been resolved: usb: typec: wcove: don't write past struct pd_messa

来源摘录 · NVD

#cve

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Status Update VDO A broken/malicious device...

CVE-2026-63961

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count be

来源摘录 · NVD

#cve

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory uio_pci_sva allocates struct uio_pci_sva...

CVE-2026-63907

In the Linux kernel, the following vulnerability has been resolved: uio: uio_pci_generic_sva: fix double free of devm_k

来源摘录 · NVD

#cve #cwe-415

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem When a configuration file provides an objec...

CVE-2026-63908

In the Linux kernel, the following vulnerability has been resolved: Input: atmel_mxt_ts - fix boundary check in mxt_pre

来源摘录 · NVD

#cve #cwe-835

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops Commit d07b26f39246 ("ksmbd: require min...

CVE-2026-63909

In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regression in smb_check_perm_dacl()

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: dma-buf: fix UAF in dma_buf_fd() tracepoint Once FD_ADD() returns, the fd is live in the file descriptor ta...

CVE-2026-63910

In the Linux kernel, the following vulnerability has been resolved: dma-buf: fix UAF in dma_buf_fd() tracepoint Once F

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: reset runtime state when cloning SAs iptfs_clone_state() clones the IPTFS mode data with kmemd...

CVE-2026-63911

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: reset runtime state when cloning SAs

来源摘录 · NVD

#cve

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname A reader in l2tp_session_get_by_ifname() can ...

CVE-2026-63918

In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcount_inc_not_zero in l2tp_session_get

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at ...

CVE-2026-63928

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with sm

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() iio_buffer_enqueue_dmabuf() allocates a stru...

CVE-2026-63929

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iio_buffer_enque

来源摘录 · NVD

#cve #cwe-401

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in error path In the err_put_buffers cleanup path of iio_hw_co...

CVE-2026-63930

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in err

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: fix division by zero in write_raw Add a zero check for val2 before using it as a divi...

CVE-2026-63931

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: fix division by zero in write

来源摘录 · NVD

#cve #cwe-369