media: rzv2h-ivc: Fix concurrent buffer list access
CVE-2026-53380
In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access
#linux
共收录 1402 条相关情报。
← 返回所有主题media: i2c: ov8856: free control handler on error in ov8856_init_controls()
CVE-2026-53379
In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free control handler on error i
drm/colorop: Fix blob property reference tracking in state lifecycle
CVE-2026-53378
In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking i
drm/msm: always recover the gpu
CVE-2026-53377
In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in cas
drm/amdkfd: Add upper bound check for num_of_nodes
CVE-2026-53376
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add upper bound check for num_of_nodes
drm/amdgpu/vce: Prevent partial address patches
CVE-2026-53375
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In
drm/amdgpu: zero-initialize GART table on allocation
CVE-2026-53374
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocatio
mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
CVE-2026-53373
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmap_prepare()
iommu/vt-d: Block PASID attachment to nested domain with dirty tracking
CVE-2026-53372
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain
RDMA/ionic: bound node_desc sysfs read with %.64s
CVE-2026-53371
In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound node_desc sysfs read with %.64s
perf/x86/intel: Improve validation and configuration of ACR masks
CVE-2026-53370
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuratio
udf: reject descriptors with oversized CRC length
CVE-2026-53369
In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length
f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage
CVE-2026-53368
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect na
selinux: fix avdcache auditing
CVE-2026-53367
In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcac
Crashing Through Defenses: Exploiting Segfaults and Chaining Around Intel CET.
本文提出了一种针对现代x86_64 Linux系统中Intel CET（控制流强制技术）的新型代码重用攻击方法——分段错误导向编程（SFOP）。传统代码重用攻击（如ROP、SROP）在启用CET的系统上通常被硬件机制阻止，因为这些机制检查间
ipv4: account for fraggap on the paged allocation path
CVE-2026-53366
In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation p
vsock/virtio: fix zerocopy completion for multi-skb sends
CVE-2026-53365
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb
Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()
CVE-2026-53364
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix memory leak in hci_le_big_
User-Space Dependency-Aware Rehosting for Linux-Based Firmware Binaries.
该论文提出了一种名为 FIRMWELL 的固件重宿主框架，旨在解决 Linux 固件二进制文件在用户空间依赖项模拟不足的问题。现有方法对用户空间知识利用不充分，导致初始化过程不完整，且将所有模拟失败视为同类，无法区分系统级问题与用户空间依赖
The Linux IOCTL Census: A Source-Derived Database of the Linux Kernel Control-Code Surface
Linux ioctl 系统调用是内核用于设备控制的通用接口，用户态程序通过打开设备节点并向驱动传递命令码和参数缓冲区来发起操作。由于每个驱动各自定义命令码并在内核上下文中解析参数，ioctl 处理程序成为内核中范围最广、最不统一的本地攻击