#CVE

共收录 70327 条相关情报。

← 返回所有主题

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() nouveau_bo_pin_locked() check...

CVE-2026-98511

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't bump pin count on failed re-pin

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish On arm64 server, we find that ...

CVE-2026-98507

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anon_vma init

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: HID: alps: unregister DualPoint Stick input device on remove alps_input_configured() allocates a second inp...

CVE-2026-98502

In the Linux kernel, the following vulnerability has been resolved: HID: alps: unregister DualPoint Stick input device

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: ipconfig: bound DHCP option construction ic_dhcp_init_options() appends the hostname (option 12), vend...

CVE-2026-98493

In the Linux kernel, the following vulnerability has been resolved: net: ipconfig: bound DHCP option construction ic_d

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw poin...

CVE-2026-98490

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failure ena_device_init() initializes the MMIO read mechanism ...

CVE-2026-98486

In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failur

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: skip expired catchall elements on insert and delete nft_setelem_catchall_insert() loo...

CVE-2026-98484

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: skip expired catchall element

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fix_host_ownership() walks only the linear...

CVE-2026-98466

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in read_unconf_index_list() read_unconf_index_list() counts unconfigured controll...

CVE-2026-98456

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in read_unconf_index_list

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2_parse_contexts() validates the complete create-con...

CVE-2026-98454

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: smb: client: close handle after create-context parsing failure SMB2_open() accounts a successful CREATE res...

CVE-2026-98453

In the Linux kernel, the following vulnerability has been resolved: smb: client: close handle after create-context pars

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: smb: client: use finish_no_open() for non-regular inodes An O_CREAT open can find an existing symlink or an...

CVE-2026-98451

In the Linux kernel, the following vulnerability has been resolved: smb: client: use finish_no_open() for non-regular i

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: smb: client: close completed creates on compound wait errors compound_send_recv() waits for responses in or...

CVE-2026-98450

In the Linux kernel, the following vulnerability has been resolved: smb: client: close completed creates on compound wa

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure before unlock When sending a compound request fails, smb_...

CVE-2026-98449

In the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure b

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: xfs: fix cursor and pointer handling when recovering iunlink buckets LOLLM pointed out a bug in xlog_recove...

CVE-2026-98443

In the Linux kernel, the following vulnerability has been resolved: xfs: fix cursor and pointer handling when recoverin

来源摘录 · NVD

#cve

漏洞预警2026-10-18 发布INFO

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a conn...

CVE-2026-98439

In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing conn

来源摘录 · NVD

#cve

漏洞预警2026-10-17 发布LOW

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML injection vulnerability because the ApplicationName and LogoURL...

CVE-2026-111932

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML inject

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-17 发布HIGH

Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostname validation flaw in GetWorkspaceProxyByHostname whose SI...

CVE-2026-111927

Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostnam

来源摘录 · NVD

#cve #cwe-522

漏洞预警2026-10-17 发布MEDIUM

Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query parameter is impro...

CVE-2024-58398

Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the

来源摘录 · NVD

#cve #cwe-601

漏洞预警2026-10-16 发布MEDIUM

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd s...

CVE-2026-89096

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repea

来源摘录 · NVD

#cve #cwe-772