Aggregator

CVE-2026-23468 | Linux Kernel up to 6.18.19/6.19.9/7.0-rc4 amdgpu bo_number resource consumption (Nessus ID 304992)

Vuldb Updates
1 month ago
A vulnerability classified as critical was found in Linux Kernel up to 6.18.19/6.19.9/7.0-rc4. Affected by this vulnerability is an unknown functionality of the component amdgpu. Such manipulation of the argument bo_number leads to resource consumption. This vulnerability is traded as CVE-2026-23468. Access to the local network is required for this attack to succeed. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-31390 | Linux Kernel up to 6.18.19/6.19.9/7.0-rc2 xe check_bo_args_are_sane memory leak (Nessus ID 304990)

Vuldb Updates
1 month ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.18.19/6.19.9/7.0-rc2. This affects the function check_bo_args_are_sane of the component xe. Executing a manipulation can lead to memory leak. This vulnerability is handled as CVE-2026-31390. The attack can only be done within the local network. There is not any exploit available. You should upgrade the affected component.
vuldb.com

CVE-2026-31392 | Linux Kernel up to 7.0-rc4 SMB Client /etc/krb5.keytab match_session weak password hash (Nessus ID 311783)

Vuldb Updates
1 month ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.0-rc4. Impacted is the function match_session of the file /etc/krb5.keytab of the component SMB Client. The manipulation results in password hash with insufficient computational effort. This vulnerability is known as CVE-2026-31392. Access to the local network is required for this attack. No exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2026-31393 | Linux Kernel up to 7.0-rc4 Bluetooth l2cap_information_rsp out-of-bounds (EUVD-2026-18768 / Nessus ID 311783)

Vuldb Updates
1 month ago
A vulnerability has been found in Linux Kernel up to 7.0-rc4 and classified as critical. The affected element is the function l2cap_information_rsp of the component Bluetooth. This manipulation causes out-of-bounds read. This vulnerability is handled as CVE-2026-31393. The attack can only be done within the local network. There is not any exploit available. The affected component should be upgraded.
vuldb.com

CVE-2026-31391 | Linux Kernel up to 7.0-rc2 crypto tfm_count allocation of resources (EUVD-2026-18764 / Nessus ID 311783)

Vuldb Updates
1 month ago
A vulnerability has been found in Linux Kernel up to 7.0-rc2 and classified as critical. Affected by this issue is the function tfm_count of the component crypto. The manipulation leads to allocation of resources. This vulnerability is traded as CVE-2026-31391. Access to the local network is required for this attack to succeed. There is no exploit available. The affected component should be upgraded.
vuldb.com

CVE-2026-23474 | Linux Kernel up to 7.0-rc4 mtd __builtin_dynamic_object_size buffer overflow (EUVD-2026-18749 / Nessus ID 304968)

Vuldb Updates
1 month ago
A vulnerability marked as critical has been reported in Linux Kernel up to 7.0-rc4. This affects the function __builtin_dynamic_object_size of the component mtd. The manipulation leads to buffer overflow. This vulnerability is documented as CVE-2026-23474. The attack requires being on the local network. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

Anthropic Releases Free Security Plugin for Claude Code Terminal to Detect Vulnerabilities

Cyber Security News
1 month ago

Anthropic has launched a security-guidance plugin for its Claude Code terminal tool that autonomously reviews code edits, model outputs, and commits in real time to catch vulnerabilities before they reach production. The plugin is free for all users and available on all plans, marking a significant step toward shifting security left in the AI-assisted development […]

The post Anthropic Releases Free Security Plugin for Claude Code Terminal to Detect Vulnerabilities appeared first on Cyber Security News.

Guru Baran

美政府允许沃尔沃在美继续销售联网汽车

不安全
1 month ago
美政府允许沃尔沃在美继续销售联网汽车沃尔沃汽车与特朗普政府达成协议，使这家汽车制造商免受美国对中国联网汽车技术的打击。这家由中国吉利控股持有多数股权的瑞典汽车制造商周二表示，公司已获得美国商务部的特别

SpaceX拿下美国太空军22.9亿美元合同

不安全
1 month ago
SpaceX拿下美国太空军22.9亿美元合同美国太空军周二宣布，已授予 SpaceX 一份价值 22.9 亿美元的合同，用于建设一个安全、高速的卫星通信网络，以连接全球范围内的军用传感器和武器平台。这

CVE-2025-15620 | Belden Hirschmann HiOS Switch Platform up to 09.4.05/10.3.01 Web Interface missing authentication (EUVD-2025-209199)

Vuldb Updates
1 month ago
A vulnerability was found in Belden Hirschmann HiOS Switch Platform up to 09.4.05/10.3.01. It has been declared as critical. This issue affects some unknown processing of the component Web Interface. Executing a manipulation can lead to missing authentication. This vulnerability appears as CVE-2025-15620. The attack may be performed from remote. There is no available exploit.
vuldb.com

Managed ad