2026-10-31 归档

今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-05-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ALSA: mixer: oss: Add card disconnect checkpoints ALSA OSS mixer layer calls the kcontrol ops rather indivi...

CVE-2026-43126

In the Linux kernel, the following vulnerability has been resolved: ALSA: mixer: oss: Add card disconnect checkpoints

来源摘录 · NVD

#cve

漏洞预警2026-05-06 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: annotate data-races around hdev->req_status __hci_cmd_sync_sk() sets hdev->req_status ...

CVE-2026-43119

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: annotate data-races around hde

来源摘录 · NVD

#cve

漏洞预警2026-05-06 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When logging that an inode exists, as part o...

CVE-2026-43118

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after

来源摘录 · NVD

#cve

漏洞预警2026-05-06 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: srcu: Use irq_work to start GP in tiny SRCU Tiny SRCU's srcu_gp_start_if_needed() directly calls schedule_w...

CVE-2026-43115

In the Linux kernel, the following vulnerability has been resolved: srcu: Use irq_work to start GP in tiny SRCU Tiny S

来源摘录 · NVD

#cve

漏洞预警2026-05-06 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: xfrm: account XFRMA_IF_ID in aevent size calculation xfrm_get_ae() allocates the reply skb with xfrm_aevent...

CVE-2026-43107

In the Linux kernel, the following vulnerability has been resolved: xfrm: account XFRMA_IF_ID in aevent size calculatio

来源摘录 · NVD

#cve #cwe-131

漏洞预警2026-05-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() We need to check __in6_dev_get() f...

CVE-2026-43101

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential NULL dereferences in __io

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-05-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns exit xfrm_policy_fini() frees the policy_bydst hash tables a...

CVE-2026-43091

In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns exit

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Presently, if the forc...

CVE-2026-43049

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on forc

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by removing bogus memset() The memset() in hid_report_raw_event() has the...

CVE-2026-43048

In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by removing bogus

来源摘录 · NVD

#cve #cwe-125 #cwe-787

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platform_label{,s} pair The RCU-protected codepaths (mpls_forward, mpls_d...

CVE-2026-43042

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platform_label{,s

来源摘录 · NVD

#cve #cwe-125 #cwe-362

漏洞预警2026-05-01 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: use skb_header_pointer() for TCPv4 GSO frag_off check Syzbot reported a KMSAN uninit-value warning in ...

CVE-2026-43036

In the Linux kernel, the following vulnerability has been resolved: net: use skb_header_pointer() for TCPv4 GSO frag_of

来源摘录 · NVD

#cve #cwe-908

漏洞预警2026-05-01 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists hci_cmd_sync_queue_once() needs to ...

CVE-2026-43022

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hci_cmd_sync_queue_once() retu

来源摘录 · NVD

#cve

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). syzbot reported use-aft...

CVE-2026-43016

In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket i

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-05-01 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobe_multi programs at attach time kprobe.multi programs run in atomic/RCU context ...

CVE-2026-43010

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobe_multi programs at atta

来源摘录 · NVD

#cve

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch precision tracking When backtrack_insn encounters a BPF_STX ...

CVE-2026-43009

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch prec

来源摘录 · NVD

#cve #cwe-682

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: move wake reason storage into validated event handlers hci_store_wake_reason() is cal...

CVE-2026-31771

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: move wake reason storage into

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-05-01 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Stop adjusting the horizontal timi...

CVE-2026-31767

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsi: Don't do DSC horizontal timing adjust

来源摘录 · NVD

#cve #cwe-369

漏洞预警2026-05-01 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ecm: Fix net_device lifecycle with device_move The net_device is allocated during function i...

CVE-2026-31725

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ecm: Fix net_device lifecycle with d

来源摘录 · NVD

#cve

漏洞预警2026-05-01 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix net_device lifecycle with device_move The net_device is allocated during function i...

CVE-2026-31724

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix net_device lifecycle with d

来源摘录 · NVD

#cve

漏洞预警2026-05-01 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix net_device lifecycle with device_move The net_device is allocated during functio...

CVE-2026-31723

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix net_device lifecycle wit

来源摘录 · NVD

#cve