#advisory

共收录 23210 条相关情报。

← 返回所有主题
安全公告2026-10-09 发布INFO

Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages

CVE-2026-104635

Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remot

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()

CVE-2026-98384

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk_protocol in bpf_s

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL

CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

bpf: Reject dev-bound-only programs on other devices

CVE-2026-98382

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other device

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

veth: manage XDP program pointers during channel resize

CVE-2026-98381

In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel re

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

net/sched: reject IDR error pointers when deleting actions

CVE-2026-98380

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error pointers when deleting

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

netfilter: ip6t_rpfilter: reject routes without inet6_dev

CVE-2026-98379

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rpfilter: reject routes without ine

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

bpf: Skip unsettled links in link iterator

CVE-2026-98378

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpf_lin

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

vlan: require the MAC header to be present in __vlan_insert_inner_tag()

CVE-2026-98377

In the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to be present in __vla

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

bpf: Use array_map_meta_equal for percpu array inner map replacement

CVE-2026-98376

In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu array inne

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

Type confusion in the device_deinit system call allows user-mode threads to execute arbitrary kernel code

CVE-2026-19575

The user-mode verification handler for the device_deinit() system call, z_vrfy_device_deinit() in kernel/device.c, valid

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

Integer overflow in dynamic kernel object allocation allows user-mode threads to corrupt the kernel heap

CVE-2026-19569

dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kern

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

ARM64 MMU can assign an in-use ASID to a new memory domain, breaking user-mode memory isolation

CVE-2026-19574

The ARM64 MMU back-end allocated address space identifiers (ASIDs) for memory domains with a bare round-robin counter in

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

Out-of-bounds write in LE Audio Broadcast Sink when copying BASE subgroup metadata into the BASS receive state

CVE-2026-19570

The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basi

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

xen/netfront: drop RX packets with a short Ethernet header

CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts

CVE-2026-101028

Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot re

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

腾讯云 2026 年国庆假期服务公告

腾讯云 2026 年国庆假期服务公告

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-10-09 发布INFO

【云数据库 SQL Server】阻塞事件及死锁事件默认采集策略更新公告

【云数据库 SQL Server】阻塞事件及死锁事件默认采集策略更新公告

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-10-09 发布INFO

【腾讯云认证】腾讯云代码助手CodeBuddy交付运维工程师认证下架通知

【腾讯云认证】腾讯云代码助手CodeBuddy交付运维工程师认证下架通知

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-10-09 发布INFO

A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the...

CVE-2026-107909

A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/b

历史摘要 · 未重新核验 · GitHub Advisory