#advisory

共收录 23421 条相关情报。

← 返回所有主题
安全公告2026-09-16 发布INFO

djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUG

CVE-2026-61590

### Impact djust's observability endpoints expose live view/session state and a remote method-invocation surface (`eval_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

@zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

CVE-2026-61560

### Summary The SSE transport mode (`SSE=true`) exposes all MCP tools without any authentication. The `upload_markdown`

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

samples/damon/wsse: handle damon_start() failure

CVE-2026-90005

In the Linux kernel, the following vulnerability has been resolved: samples/damon/wsse: handle damon_start() failure P

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

mm/damon/core: handle region split failure in apply_min_nr_regions()

CVE-2026-90004

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: handle region split failure in apply

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

futex: Prevent rcuwait use-after-free during requeue PI

CVE-2026-90003

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent rcuwait use-after-free during requeu

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

ftrace: Take trace_array reference before accessing its ftrace_ops

CVE-2026-90002

In the Linux kernel, the following vulnerability has been resolved: ftrace: Take trace_array reference before accessing

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

HID: bpf: serialize device reference release in struct_ops destroy path

CVE-2026-90001

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: serialize device reference release in str

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

HID: rmi: fix OOB access with undersized RMI reports

CVE-2026-90000

In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI report

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

HID: wacom: validate report length in wacom_intuos_pro2_bt_irq

CVE-2026-89999

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: validate report length in wacom_intuos_

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

dm: fix race when loading and unloading a table

CVE-2026-89998

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

dm: fix resume-vs-remove race

CVE-2026-89997

In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issues t

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds

CVE-2026-89996

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copy_to_

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

dma-direct: return struct page from dma_direct_alloc_from_pool()

CVE-2026-89995

In the Linux kernel, the following vulnerability has been resolved: dma-direct: return struct page from dma_direct_allo

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

dmaengine: fsl-edma: tracing: no ptr dereference during log output

CVE-2026-89994

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: tracing: no ptr dereference du

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

dmaengine: dw-edma: Initialize IRQ data before requesting IRQs

CVE-2026-89993

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requ

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

cpuidle: dt_idle_genpd: kfree() the original name allocation

CVE-2026-89992

In the Linux kernel, the following vulnerability has been resolved: cpuidle: dt_idle_genpd: kfree() the original name a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

bpf: Fix infinite loop in pcpu_freelist push with one possible CPU

CVE-2026-89991

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpu_freelist push with o

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

ceph: lock mutex in ceph_mds_check_access()

CVE-2026-89990

In the Linux kernel, the following vulnerability has been resolved: ceph: lock mutex in ceph_mds_check_access() MDS se

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()

CVE-2026-89989

In the Linux kernel, the following vulnerability has been resolved: ima: Check for ERR_PTR from dentry_path() in valida

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

kprobes: Protect kprobe_blacklist with RCU

CVE-2026-89988

In the Linux kernel, the following vulnerability has been resolved: kprobes: Protect kprobe_blacklist with RCU __withi

历史摘要 · 未重新核验 · OSV.dev