#advisory

共收录 23580 条相关情报。

← 返回所有主题
安全公告2026-09-16 发布INFO

Apache Airflow Akeyless provider: Akeyless secrets backend: team-scope guard bypass via user-controlled key

CVE-2026-86465

Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

ksmbd: prevent out-of-bounds reads in share config responses

CVE-2026-89792

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

perf: Fix use-after-free when perf mmap() revival races with the last munmap()

CVE-2026-89791

In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() revival r

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

ipv6: avoid divide by zero in rt6_multipath_rebalance

CVE-2026-89790

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6_multipath_rebalan

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free

CVE-2026-89789

In the Linux kernel, the following vulnerability has been resolved: gtp: add synchronize_net() in gtp_newlink() error p

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

ksmbd: fix tree connection use-after-free in smb2_tree_connect()

CVE-2026-89788

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2_t

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()

CVE-2026-89787

In the Linux kernel, the following vulnerability has been resolved: ext4: check dir entry fits before reading the hash

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

ext4: fix out-of-bounds read in ext4_read_inline_dir()

CVE-2026-89786

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bounds read in ext4_read_inline_di

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init

CVE-2026-89785

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in r

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6

CVE-2026-89784

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpc_sockaddr2uaddr() return value in

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full

CVE-2026-89783

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix out-of-bounds write in xfrm6_input_addr(

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

fs/ntfs3: reject restart table growth beyond U16_MAX entries

CVE-2026-89782

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16_MA

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()

CVE-2026-89781

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in read_log_rec_bu

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

net: qualcomm: rmnet: restore skb->dev on deaggregated frames

CVE-2026-89780

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb->dev on deaggrega

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

fs/ntfs3: validate ef->size covers the record's name and value

CVE-2026-89779

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef->size covers the record's nam

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

isofs: fix out-of-bounds page array access on empty zisofs block

CVE-2026-89778

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

vfio/pci: clear vdev->msi_perm after freeing it on init failure

CVE-2026-89777

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes

CVE-2026-89776

In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/GRO

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation

CVE-2026-89775

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle negative S1 walk levels in VNCR

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a second slot

CVE-2026-88255

Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Te

历史摘要 · 未重新核验 · OSV.dev