Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-92511
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_destroy_cq_user()
When accessing a CQ via the netlink...
|
7.8 High | — | 0,13% | 17 Sep 2026 |
|
CVE-2026-92510
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_destroy_srq_user()
When accessing a SRQ via the netlin...
|
7.8 High | — | 0,13% | 17 Sep 2026 |
|
CVE-2026-92508
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_free_cq()
When accessing a CQ via the netlink path the...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-92507
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_dealloc_pd_user()
When accessing a PD via the netlink...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-92504
In the Linux kernel, the following vulnerability has been resolved:
thermal: intel: int3400: clean up ODVP on probe failures
evaluate_odvp() creates per-ODVP sysfs file...
|
7.0 High | — | 0,15% | 17 Sep 2026 |
|
CVE-2026-92489
In the Linux kernel, the following vulnerability has been resolved:
xfrm: Fix skb double-free in xfrm_dev_direct_output()
A return value other than 1 from local_out() m...
|
9.8 Critical | — | 0,46% | 17 Sep 2026 |
|
CVE-2026-92488
In the Linux kernel, the following vulnerability has been resolved:
RDMA/erdma: complete object teardown when the destroy command fails
erdma_destroy_qp(), erdma_destro...
|
7.0 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-92485
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix WARNING in bpf_tracing_link_release
The trampoline could be corrupted by the blindly
'tr->f...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90435
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix integer overflow of user QP buffer size
set_user_buf_size() computes the QP buffer si...
|
7.8 High | — | 0,13% | 17 Sep 2026 |
|
CVE-2026-90429
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init
A user VINTF is torn down by...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90427
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()
__tegra241_cmdqv_probe()...
|
7.4 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90425
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID
tegra241_vintf_init_vsid() maps a gue...
|
8.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90423
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix UAF in ODP init error-handling path
rxe_odp_mr_init_user() stores &umem_odp->umem in m...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90419
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: prevent out-of-bounds read in super root block parsing
super-root inode metadata size is tru...
|
7.1 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-90414
In the Linux kernel, the following vulnerability has been resolved:
IB/isert: reject PDUs declaring more data than was received
isert_recv_done() hands each received PD...
|
9.1 Critical | — | 0,51% | 17 Sep 2026 |
|
CVE-2026-90413
In the Linux kernel, the following vulnerability has been resolved:
IB/isert: reject login PDUs declaring more data than was received
isert_login_recv_done() records ho...
|
9.1 Critical | — | 0,82% | 17 Sep 2026 |
|
CVE-2026-90408
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()
There is no policy entry...
|
7.7 High | — | 0,19% | 17 Sep 2026 |
|
CVE-2026-90407
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()
There is no policy entry...
|
7.7 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-90403
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtlwifi: pci: fix error path in rtl_pci_probe()
In the last error path in rtl_pci_probe(), the...
|
7.0 High | — | 0,15% | 17 Sep 2026 |
|
CVE-2026-90402
In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: host: Fix controller cleanup on EDL sysfs failure
mhi_register_controller() adds the contr...
|
7.0 High | — | 0,12% | 17 Sep 2026 |
|
CVE-2026-90401
In the Linux kernel, the following vulnerability has been resolved:
md: remove REQ_NOWAIT support from raid1/10/456
REQ_NOWAIT support in md personalities that can bloc...
|
7.1 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90399
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()
Currently, in ath12k_wmi_mac_phy_caps_pars...
|
8.4 High | — | 0,19% | 17 Sep 2026 |
|
CVE-2026-90398
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()
Currently, in ath11k_wmi_tlv_mac_phy_caps_...
|
8.4 High | — | 0,14% | 17 Sep 2026 |
|
CVE-2026-90392
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix potential UAF when reading bpf link info
In bpf_link_show_fdinfo and bpf_link_get_info_by_f...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90388
In the Linux kernel, the following vulnerability has been resolved:
iommu/dma: Check atomic pool allocation result directly
The non-blocking, non-coherent allocation pa...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90387
In the Linux kernel, the following vulnerability has been resolved:
swiotlb: Preserve allocation virtual address for dynamic pools
swiotlb_alloc_tlb() can allocate from...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90383
In the Linux kernel, the following vulnerability has been resolved:
misc: sgi-gru: remove interrupt-context page-table walks
The GRU TLB miss handler walks a process's...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90381
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
When perf...
|
8.8 High | — | 0,38% | 17 Sep 2026 |
|
CVE-2026-90380
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete
A use-after-free issue occurs in mt7...
|
8.8 High | — | 0,31% | 17 Sep 2026 |
|
CVE-2026-90379
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash
When an AER error occurs an...
|
8.8 High | — | 0,38% | 17 Sep 2026 |
|
CVE-2026-90372
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss
If a peer's VHT/HE MCS map has no...
|
7.1 High | — | 0,36% | 17 Sep 2026 |
|
CVE-2026-90371
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: fix RXDMAD_C buffer recycling race
The RXDMAD_C buffers come from the RRO data queues' p...
|
8.8 High | — | 0,38% | 17 Sep 2026 |
|
CVE-2026-90367
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER
mt7996_mac_reset_work() pa...
|
8.8 High | — | 0,38% | 17 Sep 2026 |
|
CVE-2026-90358
In the Linux kernel, the following vulnerability has been resolved:
bpf, x86: Fix trampoline stack size for 128-bit arguments
btf_distill_func_proto() accepts a functio...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90357
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
The flow is added to dev->twt_l...
|
8.8 High | — | 0,34% | 17 Sep 2026 |
|
CVE-2026-90353
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: fix ext PHY use-after-free on register error path
After mt7915_register_ext_phy(...
|
7.0 High | — | 0,14% | 17 Sep 2026 |
|
CVE-2026-90347
In the Linux kernel, the following vulnerability has been resolved:
arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry
Commit e057b9477232 ("arm64: syscall:...
|
8.4 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90343
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: stop PMSR before P2P and NAN teardown
PMSR request teardown must abort active measur...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90341
In the Linux kernel, the following vulnerability has been resolved:
firmware: coreboot: Validate table bounds
The existing coreboot_table_populate() bounds checks limit...
|
7.7 High | — | 0,19% | 17 Sep 2026 |
|
CVE-2026-90332
In the Linux kernel, the following vulnerability has been resolved:
PCI: dwc: ep: Flush cached MSI write before unmapping the iATU
The MSI-X path already flushes any po...
|
8.2 High | — | 0,27% | 17 Sep 2026 |
|
CVE-2026-90329
In the Linux kernel, the following vulnerability has been resolved:
HID: synchronize input before cleaning up a failed probe
hid_device_io_start() allows reports to run...
|
8.8 High | — | 0,34% | 17 Sep 2026 |
|
CVE-2026-90326
In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: fix race between policy activation and blkg destruction
When switching an IO scheduler o...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90325
In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: skip dying blkg in blkcg_activate_policy()
When switching IO schedulers on a block devic...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90324
In the Linux kernel, the following vulnerability has been resolved:
ublk: check import_ubuf() return value
import_ubuf() can fail if the address range (provided by the...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90321
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: validate inline xattrs during inode block validation
Patch series "ocfs2: validate xattr entr...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90320
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: validate external xattr entries when reading metadata
ocfs2_validate_xattr_block() checks the...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90317
In the Linux kernel, the following vulnerability has been resolved:
bpf: Invalidate RCU pointers after final spin unlock
In a sleepable BPF program, a spin lock can pro...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90316
In the Linux kernel, the following vulnerability has been resolved:
drm/omap: dsi: Do not copy isr table
To be able to unregister stuff from isrs, the corresponding tab...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90312
In the Linux kernel, the following vulnerability has been resolved:
bpf: Check load-acquire src ptr type before the load
check_atomic_load() calls check_load_mem() befo...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90309
In the Linux kernel, the following vulnerability has been resolved:
RDMA/erdma: Hold CQ references when processing EQ events
EQ handlers look up CQs from dev->cq_xa and...
|
7.8 High | — | 0,17% | 17 Sep 2026 |