Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-98096
In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: restore network header before routing and forwarding
ipv6_srh_rcv() runs with skb->data at...
|
7.4 High | — | 0,51% | 25 Sep 2026 |
|
CVE-2026-98078
linux kernel
In the Linux kernel, the following vulnerability has been resolved:
ipvs: fix reversed sequence option serialization
hton_seq() expects the host-order source first and...
|
4.4 Medium | — | 0,15% | 25 Sep 2026 |
|
CVE-2026-98080
linux kernel
In the Linux kernel, the following vulnerability has been resolved:
btrfs: do not force reloc root creation during qgroup_account_snapshot()
[BUG]
When running btrfs/25...
|
5.5 Medium | — | 0,13% | 25 Sep 2026 |
|
CVE-2026-98082
linux kernel
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix the possible bioc_list memory leak during error
There are two possible ways to leak bioc...
|
5.5 Medium | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-98083
linux kernel
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix transaction use-after-free in raid stripe insertion
If allocation of a RAID stripe extent...
|
7.0 High | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-98073
In the Linux kernel, the following vulnerability has been resolved:
net: Remove conflicting altnames for dying netns in __dev_change_net_namespace().
syzbot reported th...
|
7.8 High | — | 0,16% | 25 Sep 2026 |
|
CVE-2026-98070
In the Linux kernel, the following vulnerability has been resolved:
net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()
rds_tcp_reset_callbacks() quiesces the tra...
|
8.1 High | — | 0,48% | 25 Sep 2026 |
|
CVE-2026-98069
In the Linux kernel, the following vulnerability has been resolved:
net/rds: acquire the fastpath locks in rds_conn_shutdown()
rds_conn_shutdown() quiesces the transmit...
|
8.1 High | — | 0,57% | 25 Sep 2026 |
|
CVE-2026-98062
linux kernel
In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark signal tracepoint siginfo arguments as scalar
The signal_generate and signal_deliver trace...
|
5.5 Medium | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-98054
linux kernel
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Fix unbalanced module reference count
strace_open() invokes try_module_get() which...
|
5.5 Medium | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-98053
linux kernel
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Refactor and fix init_config access
Existing code accesses enties found in ->init_...
|
5.5 Medium | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-98051
linux kernel
In the Linux kernel, the following vulnerability has been resolved:
net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times
The loop initialised next_index fro...
|
5.5 Medium | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-98056
In the Linux kernel, the following vulnerability has been resolved:
nvme: remove stale namespaces by NSID range during scan
nvme_scan_ns_list() drops the stale namespac...
|
7.5 High | — | 0,60% | 25 Sep 2026 |
|
CVE-2026-98052
linux kernel
In the Linux kernel, the following vulnerability has been resolved:
net: bcmasp: clear txcb->last before writing each descriptor
bcmasp_xmit() only wrote txcb->last = t...
|
7.8 High | — | 0,13% | 25 Sep 2026 |
|
CVE-2026-98049
linux kernel
In the Linux kernel, the following vulnerability has been resolved:
bpf: zero extend the result of an arena 32-bit cmpxchg
bpf_convert_ctx_accesses() rewrites an atomic...
|
5.5 Medium | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-98050
linux kernel
In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context
Currently mlxsw_sp1_ptp_h...
|
7.5 High | — | 0,17% | 25 Sep 2026 |
|
CVE-2026-98041
In the Linux kernel, the following vulnerability has been resolved:
bpf: Don't predict JMP32 pointer vs zero comparisons
Consider the following program:
r1 = m...
|
7.0 High | — | 0,14% | 25 Sep 2026 |
|
CVE-2026-98030
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size
bcm_sf2_cfp_rule_get_all() wa...
|
7.0 High | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-98029
In the Linux kernel, the following vulnerability has been resolved:
eth: nfp: bound the ntuple rule dump by the caller's buffer size
nfp_net_get_fs_loc() dumps every en...
|
7.0 High | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-98027
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size
mv88e6xxx_get_rxnfc() us...
|
7.0 High | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-98023
In the Linux kernel, the following vulnerability has been resolved:
vxlan: reject dynamic fdb entries that reference a nexthop id
The commit cited in the Fixes tag allo...
|
7.8 High | — | 0,13% | 25 Sep 2026 |
|
CVE-2026-98017
In the Linux kernel, the following vulnerability has been resolved:
net/sched: defer qdisc freeing after failed creation
An RTM_NEWQDISC request can make clsact bind a...
|
7.8 High | — | 0,13% | 25 Sep 2026 |
|
CVE-2026-98002
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Fix ineffective error check in nested domain allocation
amd_iommu_pdom_id_alloc() returns...
|
7.8 High | — | 0,11% | 25 Sep 2026 |
|
CVE-2026-97991
In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim_blk: reject out-of-range sector starts
vdpasim_blk_check_range() logs an invalid start sect...
|
7.8 High | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-97990
In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim_net: check TX pull result before RX copy
vringh_iov_pull_iotlb() returns a signed byte coun...
|
7.5 High | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-97971
In the Linux kernel, the following vulnerability has been resolved:
nstree: check listing permission before taking a namespace reference
legitimize_ns() takes a referen...
|
7.8 High | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-97957
In the Linux kernel, the following vulnerability has been resolved:
net: hinic: fix mailbox segment buffer overflow
check_mbox_seq_id_and_seg_len() validates that seq_i...
|
8.8 High | — | 0,14% | 25 Sep 2026 |
|
CVE-2026-97953
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: fix TX descriptor availability check for TSO traffic
stmmac_tso_xmit() estimates the nu...
|
7.0 High | — | 0,41% | 25 Sep 2026 |
|
CVE-2026-97941
In the Linux kernel, the following vulnerability has been resolved:
mm/slab: take n->list_lock in __slab_try_return_freelist() to avoid race
Commit ba7425312607 ("mm, s...
|
7.8 High | — | 0,15% | 25 Sep 2026 |
|
CVE-2026-97940
In the Linux kernel, the following vulnerability has been resolved:
ipv6: fix fib6 walker UAF on seq stop
ipv6_route_iter_active() treats a walker in FWS_U at the table...
|
7.8 High | — | 0,16% | 25 Sep 2026 |
|
CVE-2026-97937
In the Linux kernel, the following vulnerability has been resolved:
ftrace: fork: Initialize function graph state before copy_exec_state()
dup_task_struct() copies the...
|
7.8 High | — | 0,15% | 25 Sep 2026 |
|
CVE-2026-97931
In the Linux kernel, the following vulnerability has been resolved:
ALSA: us122l: Prevent write upgrades for read mappings
The hwdep mmap callback rejects read-buffer m...
|
7.0 High | — | 0,15% | 25 Sep 2026 |
|
CVE-2026-97926
In the Linux kernel, the following vulnerability has been resolved:
ufs: validate cylinder group metadata before caching it
ufs_read_cylinder() copies the cylinder grou...
|
7.0 High | — | 0,15% | 25 Sep 2026 |
|
CVE-2026-97911
In the Linux kernel, the following vulnerability has been resolved:
accel: ethosu: Ensure SRAM region size matches job
It is possible for userspace to set the job SRAM...
|
7.8 High | — | 0,15% | 25 Sep 2026 |
|
CVE-2026-97910
In the Linux kernel, the following vulnerability has been resolved:
ASoC: sprd: validate compress buffer sizes against fixed allocations
sprd_platform_compr_open() allo...
|
7.8 High | — | 0,16% | 25 Sep 2026 |
|
CVE-2026-97903
In the Linux kernel, the following vulnerability has been resolved:
exit: hold a reference to thread_pid across proc_flush_pid
Commit 0a36bad01731 ("release_task: kill...
|
7.8 High | — | 0,12% | 25 Sep 2026 |
|
CVE-2026-97875
Rojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable to DNS rebinding. A malicious webpage can read all project so...
|
8.1 High | — | 0,26% | 25 Sep 2026 |
|
CVE-2026-97612
In the Linux kernel, the following vulnerability has been resolved:
net: mpls: clear inner_protocol when the last label is popped
skb_mpls_push() records the pre-encaps...
|
7.8 High | — | 0,16% | 25 Sep 2026 |
|
CVE-2026-97611
In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: fix use-after-free of the flow table mask array
tbl_mask_array_realloc() retires t...
|
7.8 High | — | 0,16% | 25 Sep 2026 |
|
CVE-2026-97609
In the Linux kernel, the following vulnerability has been resolved:
netfilter: cttimeout: prevent UAF during module unload
nf_ct_set_timeout() protects the timeout hook...
|
7.0 High | — | 0,14% | 25 Sep 2026 |
|
CVE-2026-97608
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_log: unregister loggers before per-net teardown
nf_log_syslog and nfnetlink_log unregi...
|
7.0 High | — | 0,15% | 25 Sep 2026 |
|
CVE-2026-97602
In the Linux kernel, the following vulnerability has been resolved:
inet: frags: invalidate queues before flushing them
fqdir_pre_exit() flushes the skbs from incomplet...
|
7.8 High | — | 0,16% | 25 Sep 2026 |
|
CVE-2026-97595
In the Linux kernel, the following vulnerability has been resolved:
mac802154: fix use-after-free of sdata via queued RX frames
The RX softirq producer ieee802154_subif...
|
7.5 High | — | 0,28% | 25 Sep 2026 |
|
CVE-2026-97594
In the Linux kernel, the following vulnerability has been resolved:
landlock: Fix use-after-free of the source's parent directory
current_check_refer_path() reads old_d...
|
7.8 High | — | 0,16% | 25 Sep 2026 |
|
CVE-2026-97589
In the Linux kernel, the following vulnerability has been resolved:
s390/crypto: Fix wrong return code to engine in asynch callbacks
When crypto_finalize_hash_request()...
|
7.0 High | — | 0,14% | 25 Sep 2026 |
|
CVE-2026-97584
In the Linux kernel, the following vulnerability has been resolved:
afs: Fix incorrect free in candidate cleanup in afs_lookup_server()
Fix afs_lookup_server() to not f...
|
7.8 High | — | 0,16% | 25 Sep 2026 |
|
CVE-2026-97583
In the Linux kernel, the following vulnerability has been resolved:
afs: Clear stale peer app data after address list changes
afs_fs_probe_fileserver() fetches the curr...
|
7.5 High | — | 0,41% | 25 Sep 2026 |
|
CVE-2026-97580
In the Linux kernel, the following vulnerability has been resolved:
media: rkvdec: bound HEVC tile loops and PPS id to the array capacity
compute_tiles_uniform() and co...
|
7.8 High | — | 0,15% | 25 Sep 2026 |
|
CVE-2026-97579
In the Linux kernel, the following vulnerability has been resolved:
media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity
vdec_av1_slice_setup_tile()...
|
7.8 High | — | 0,16% | 25 Sep 2026 |
|
CVE-2026-97578
In the Linux kernel, the following vulnerability has been resolved:
media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer
rockchip_vpu981_av1_dec_set_t...
|
7.8 High | — | 0,16% | 25 Sep 2026 |