2026-10-31 归档

今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-05-01 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Fix net_device lifecycle with device_move The net_device is allocated during function...

CVE-2026-31722

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Fix net_device lifecycle with

来源摘录 · NVD

#cve

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipc_validate_msg() ipc_validate_msg() computes the expected message size ...

CVE-2026-31707

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipc_validate_msg(

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() smb_inherit_dacl() trusts the on-disk nu...

CVE-2026-31706

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_aces and harden ACE walk in smb

来源摘录 · NVD

#cve

漏洞预警2026-04-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGI...

CVE-2026-31678

In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release

来源摘录 · NVD

#cve #cwe-362 #cwe-367

漏洞预警2026-04-25 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - limit RX SG extraction by receive buffer budget Make af_alg_get_rsgl() limit each RX scatt...

CVE-2026-31677

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - limit RX SG extraction by receive

来源摘录 · NVD

#cve

漏洞预警2026-04-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_netem: fix out-of-bounds access in packet corruption In netem_enqueue(), the packet corrupti...

CVE-2026-31675

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_netem: fix out-of-bounds access in p

来源摘录 · NVD

#cve #cwe-125 #cwe-787

漏洞预警2026-04-24 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish NF_HOOK After async crypto completes, xfrm_input_resume() c...

CVE-2026-31663

In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish NF_

来源摘录 · NVD

#cve #cwe-416 #cwe-826

漏洞预警2026-04-24 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled Keep the NOC_HDCP clock always enabled to fix th...

CVE-2026-31655

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock

来源摘录 · NVD

#cve

漏洞预警2026-04-24 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: don't call cdev_init while cdev in use When calling unbind, then bind again, cdev_init ...

CVE-2026-31606

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: don't call cdev_init while cdev

来源摘录 · NVD

#cve

漏洞预警2026-04-24 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock Take and hold kvm->lock for before ...

CVE-2026-31592

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Protect *all* of sev_mem_enc_register_reg

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-04-24 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Fix kernel panic due to __initconst misuse Fix a kernel panic when probing the driver a...

CVE-2026-31573

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Fix kernel panic due to __initc

来源摘录 · NVD

#cve

漏洞预警2026-04-24 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add missing secure storage access fixups for donated memory There are special cases where secure s...

CVE-2026-31568

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add missing secure storage access fixups f

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-04-24 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: spi: spi-dw-dma: fix print error log when wait finish transaction If an error occurs, the device may not ha...

CVE-2026-31560

In the Linux kernel, the following vulnerability has been resolved: spi: spi-dw-dma: fix print error log when wait fini

来源摘录 · NVD

#cve

漏洞预警2026-04-24 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: nvmet: move async event work off nvmet-wq For target nvmet_ctrl_free() flushes ctrl->async_event_work. If n...

CVE-2026-31557

In the Linux kernel, the following vulnerability has been resolved: nvmet: move async event work off nvmet-wq For targ

来源摘录 · NVD

#cve #cwe-667

漏洞预警2026-04-23 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() When querying a nexthop object via RTM_GETNEXT...

CVE-2026-31531

In the Linux kernel, the following vulnerability has been resolved: ipv4: nexthop: allocate skb dynamically in rtm_get_

来源摘录 · NVD

#cve

漏洞预警2026-04-22 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() iavf incorrectly uses real_num_tx_queues for ETH...

CVE-2026-31505

In the Linux kernel, the following vulnerability has been resolved: iavf: fix out-of-bounds writes in iavf_get_ethtool_

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-04-22 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type confusion with non-Ethernet ports Similar to commit 950803f72547 ("bonding: fix t...

CVE-2026-31502

In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type confusion with non-Ethern

来源摘录 · NVD

#cve #cwe-843

漏洞预警2026-04-22 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) Protect regulator operations with mutex The regulator operations pmbus_regulator_get_vo...

CVE-2026-31486

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) Protect regulator operations wi

来源摘录 · NVD

#cve #cwe-362 #cwe-667

漏洞预警2026-04-22 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue when process immedia...

CVE-2026-31462

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PAS

来源摘录 · NVD

#cve

漏洞预警2026-04-22 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix OOB write in QUERY_INFO for compound requests When a compound request such as READ + QUERY_INFO(...

CVE-2026-31432

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix OOB write in QUERY_INFO for compound req

来源摘录 · NVD

#cve #cwe-787