Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-84854
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data...
|
7.0 High | — | 0,10% | 6 Okt 2026 |
|
CVE-2026-80327
An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and...
|
5.1 Medium | — | 0,38% | 6 Okt 2026 |
|
CVE-2026-98369
In the Linux kernel, the following vulnerability has been resolved:
xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()
syzbot r...
|
7.8 High | — | 0,15% | 6 Okt 2026 |
|
CVE-2026-98368
In the Linux kernel, the following vulnerability has been resolved:
esp: downgrade zerocopy managed frags before mutating skb frags
On the out-of-place output path (esp...
|
7.8 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98367
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept
We need to clear cep bef...
|
7.8 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98366
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: validate access flags before swapping the MR's PD
rxe_rereg_user_mr() reassigns mr->ibmr.p...
|
7.8 High | — | 0,12% | 6 Okt 2026 |
|
CVE-2026-98365
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access
mr_check_range() validates...
|
9.8 Critical | — | 0,38% | 6 Okt 2026 |
|
CVE-2026-98364
In the Linux kernel, the following vulnerability has been resolved:
xfrm: hold net_device reference under RCU in bundle creation
xfrm_bundle_create() and xfrm_create_du...
|
7.8 High | — | 0,12% | 6 Okt 2026 |
|
CVE-2026-98361
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths
Commit 0b261d7c1cd3 ("RDMA/rxe: Break endle...
|
7.8 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98360
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds
rxe_get_mcg() publishes a new...
|
7.0 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98359
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
ib_device_get_netdev() intentionally ret...
|
7.0 High | — | 0,12% | 6 Okt 2026 |
|
CVE-2026-98357
In the Linux kernel, the following vulnerability has been resolved:
IB/isert: wait for deferred control PDU completions before releasing the connection
isert_send_done(...
|
8.1 High | — | 0,36% | 6 Okt 2026 |
|
CVE-2026-98349
In the Linux kernel, the following vulnerability has been resolved:
wifi: libipw: reject too-short beacon and probe responses
libipw_process_probe_response() and the li...
|
7.1 High | — | 0,26% | 6 Okt 2026 |
|
CVE-2026-98348
In the Linux kernel, the following vulnerability has been resolved:
wifi: libipw: reject too-short association responses
libipw_handle_assoc_resp() reads the capability...
|
7.1 High | — | 0,26% | 6 Okt 2026 |
|
CVE-2026-98341
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: don't free driver-owned scan requests
When an interface goes down while a scan is ru...
|
7.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98339
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: don't filter by BSS type when removing stale entries
When an assoc AP switches to a...
|
8.8 High | — | 0,29% | 6 Okt 2026 |
|
CVE-2026-98331
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: unlist vifs when their netdev is unregistered
mac80211 only removes vifs from the lo...
|
7.0 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98330
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: get the wiphy out of a dying network namespace
When a network namespace is destroyed...
|
7.0 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98324
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: pxa: fix double counting of the hw descriptors
pxad_alloc_desc() was converted from...
|
7.8 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98323
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Bound fragmented header copies by the remaining length
siw_get_hdr() can receive an extend...
|
9.8 Critical | — | 0,56% | 6 Okt 2026 |
|
CVE-2026-98320
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: hold reference on ct until flow is released
nf_ct_put() releases the ct->ext a...
|
7.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98318
In the Linux kernel, the following vulnerability has been resolved:
smb: client: validate absolute native symlink targets before NT fixups
With symlinkroot unset, an ab...
|
7.8 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98315
In the Linux kernel, the following vulnerability has been resolved:
ntfs: protect runlist updates with the runlist lock
ntfs_non_resident_attr_shrink() calls runlist he...
|
7.8 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98311
In the Linux kernel, the following vulnerability has been resolved:
wifi: virt_wifi: don't transfer operstate before register
virt_wifi_newlink() calls netif_stacked_tr...
|
7.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98305
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: mxl862xx: disable the stats poll on teardown
mxl862xx_setup() arms the stats poll before m...
|
7.8 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98290
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup
rfcomm_sock_cleanup_listen() clos...
|
7.5 High | — | 0,26% | 6 Okt 2026 |
|
CVE-2026-98283
In the Linux kernel, the following vulnerability has been resolved:
KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
kvmhv_emulate_tlbie_all_lp...
|
8.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98282
In the Linux kernel, the following vulnerability has been resolved:
powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba
The commit b1af23d836f8 ("KVM: PP...
|
8.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98281
In the Linux kernel, the following vulnerability has been resolved:
futex: Also allocate private hash on vfork()
As Jann demonstrated, it is entirely feasible to access...
|
7.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98276
In the Linux kernel, the following vulnerability has been resolved:
net: lock the socket in sock_gettstamp()
sk->sk_flags must only be changed while holding the socket...
|
7.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98261
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
When a secondary channel is no longer...
|
8.1 High | — | 0,44% | 6 Okt 2026 |
|
CVE-2026-98260
In the Linux kernel, the following vulnerability has been resolved:
exec: Cleanup POSIX timers right after de_thread()
A per-thread CPU timer holds a reference to the P...
|
7.8 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98258
In the Linux kernel, the following vulnerability has been resolved:
posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
Kijo analyzed another r...
|
7.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98257
In the Linux kernel, the following vulnerability has been resolved:
rds: ib: use rds_conn_drop() on protocol version mismatch
rds_ib_cm_connect_complete() runs from the...
|
7.5 High | — | 0,53% | 6 Okt 2026 |
|
CVE-2026-98256
In the Linux kernel, the following vulnerability has been resolved:
signal: Prevent exec() race
Hyunwoo debugged the following KASAN UAF splat:
BUG: KASAN: slab-use-...
|
7.8 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98254
In the Linux kernel, the following vulnerability has been resolved:
swiotlb: use the adjusted address for the highmem page lookup
swiotlb_bounce() reads the page frame...
|
7.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98253
In the Linux kernel, the following vulnerability has been resolved:
RDMA/ucma: Serialize join and leave on copy_to_user failure
rdma_join_multicast() queues RoCE work t...
|
7.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98252
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
iwpm_get_nlmsg_request() initializes refcoun...
|
7.0 High | — | 0,12% | 6 Okt 2026 |
|
CVE-2026-98251
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: avoid reallocating confirmed conntrack labels
ovs_ct_get_conn_labels() adds the labels...
|
7.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98243
In the Linux kernel, the following vulnerability has been resolved:
dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3
The patch "dma-buf: dm...
|
7.1 High | — | 0,12% | 6 Okt 2026 |
|
CVE-2026-98241
In the Linux kernel, the following vulnerability has been resolved:
ipv6: xfrm: use full sockets in local error paths
xfrm6_local_rxpmtu() and xfrm6_local_error() deref...
|
7.8 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-98239
In the Linux kernel, the following vulnerability has been resolved:
net: lan743x: fix RX checksum use-after-free
lan743x_rx_process_buffer() adds each non-first receive...
|
8.1 High | — | 0,47% | 6 Okt 2026 |
|
CVE-2026-98230
In the Linux kernel, the following vulnerability has been resolved:
xfrm: use hlist_del_init_rcu for state_cache and state_cache_input
Commit 14acf9652e56 ("xfrm: defen...
|
7.0 High | — | 0,12% | 6 Okt 2026 |
|
CVE-2026-98229
In the Linux kernel, the following vulnerability has been resolved:
xfrm: save input state data before secpath resets
xfrm_input() stores the current xfrm_state in the...
|
7.8 High | — | 0,16% | 6 Okt 2026 |
|
CVE-2026-98228
In the Linux kernel, the following vulnerability has been resolved:
mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ
On I6500 CPU cores, lld and scd giv...
|
7.8 High | — | 0,12% | 6 Okt 2026 |
|
CVE-2026-98216
In the Linux kernel, the following vulnerability has been resolved:
IB/hfi1: Fix the PIO_CRED credit-return mmap
hfi1_file_mmap()'s PIO_CRED case must hand user space t...
|
7.1 High | — | 0,13% | 6 Okt 2026 |
|
CVE-2026-98197
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
When the fan/pwm 4-5 pins are not used as...
|
7.0 High | — | 0,12% | 6 Okt 2026 |
|
CVE-2026-98180
In the Linux kernel, the following vulnerability has been resolved:
drm/msm: RCU-free the scheduler-containing ring and VM objects
Both struct msm_ringbuffer and struct...
|
7.1 High | — | 0,12% | 6 Okt 2026 |
|
CVE-2026-98175
In the Linux kernel, the following vulnerability has been resolved:
smb: client: cancel reconnect work in clean_demultiplex_info()
clean_demultiplex_info() cancels serv...
|
7.5 High | — | 0,33% | 6 Okt 2026 |
|
CVE-2026-98174
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix rlist race and missing initialization
TCP_Server_Info.rlist is allocated via kzallo...
|
7.5 High | — | 0,37% | 6 Okt 2026 |