Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-90308
In the Linux kernel, the following vulnerability has been resolved:
RDMA/erdma: Hold QP references for AE and CM processing
AE QP fatal events and iWARP CM paths load Q...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90301
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: o2hb: quiesce negotiate handlers and timeout work
Heartbeat regions publish struct o2hb_regio...
|
8.1 High | — | 0,53% | 17 Sep 2026 |
|
CVE-2026-90294
In the Linux kernel, the following vulnerability has been resolved:
IB/isert: delay the final Login Response until the session is registered
isert_put_login_tx() puts t...
|
7.5 High | — | 0,68% | 17 Sep 2026 |
|
CVE-2026-90293
In the Linux kernel, the following vulnerability has been resolved:
IB/isert: post the full-feature receive buffers after session registration
isert_put_login_tx() post...
|
7.5 High | — | 0,69% | 17 Sep 2026 |
|
CVE-2026-90292
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Fix use-after-free in siw_accept()
siw_accept() looks up the QP supplied by userspace. If...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90291
In the Linux kernel, the following vulnerability has been resolved:
module/dups: Fix use-after-free in kmod_dup_req lifetime handling
The kmod dups code uses RCU to ens...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90289
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Resize MST HDCP per-connector arrays to 32
AMDGPU_DM_MAX_DISPLAY_INDEX is 31. It su...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90288
In the Linux kernel, the following vulnerability has been resolved:
phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure
for_each_child_of_node_scope...
|
7.4 High | — | 0,15% | 17 Sep 2026 |
|
CVE-2026-90286
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/gfx6: Use PFP on the compute queues too
On GFX6, the compute rings use the same CP path a...
|
8.8 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-90268
In the Linux kernel, the following vulnerability has been resolved:
scsi: sd: Fix error handling in sd_probe() after large pool creation failure
After device_add(&sdkp-...
|
8.1 High | — | 0,45% | 17 Sep 2026 |
|
CVE-2026-90260
In the Linux kernel, the following vulnerability has been resolved:
btrfs: zoned: don't clobber the extent buffer when zeroing it out
On a zoned filesystem a freed-but-...
|
7.1 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90256
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind
hci_conn::l2cap_data is acc...
|
8.8 High | — | 0,34% | 17 Sep 2026 |
|
CVE-2026-90255
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_conn: fix the SCO setup context lifetime
hci_setup_sync() queues a conn_handle_t with...
|
8.8 High | — | 0,34% | 17 Sep 2026 |
|
CVE-2026-90246
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix integer overflow in verify_tags() bounds check
verify_tags() validates the tagset tabl...
|
7.1 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90244
In the Linux kernel, the following vulnerability has been resolved:
iommu/dma: Restore locking around msi_page_list
Unlike a group's default domain, which is always fre...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90243
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Clear Present bit before tearing down copied context entry
copied_context_tear_down() ze...
|
8.1 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90241
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Tear down scalable-mode context on probe failure
intel_pasid_setup_sm_context() walks a...
|
8.2 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90240
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Flush context cache with correct SID when tearing down aliases
domain_context_clear_one(...
|
8.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90237
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_ct: move custom expectation support to helper
Originally, the ct expectation support...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90235
In the Linux kernel, the following vulnerability has been resolved:
sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
xprtsock replaces and r...
|
9.8 Critical | — | 0,62% | 17 Sep 2026 |
|
CVE-2026-90234
In the Linux kernel, the following vulnerability has been resolved:
NFS: Return a delegation the client fails to record
When an NFS server grants a delegation in an OPE...
|
7.5 High | — | 0,61% | 17 Sep 2026 |
|
CVE-2026-90231
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix unconfined user namespace restriction forced stack
If a task is already confined by a...
|
8.4 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90230
In the Linux kernel, the following vulnerability has been resolved:
nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()
nvmet_execute_auth_send() allocates the...
|
9.1 Critical | — | 0,46% | 17 Sep 2026 |
|
CVE-2026-90229
In the Linux kernel, the following vulnerability has been resolved:
nvme-apple: Destroy the admin queue on removal
The admin queue is allocated with blk_mq_alloc_queue(...
|
7.4 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90228
In the Linux kernel, the following vulnerability has been resolved:
nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()
When a host issues an Identif...
|
7.5 High | — | 0,67% | 17 Sep 2026 |
|
CVE-2026-90227
In the Linux kernel, the following vulnerability has been resolved:
nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
Unlike IO_CMD / IO64_CMD, NVME_IOCTL_SUBMIT_IO n...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90225
In the Linux kernel, the following vulnerability has been resolved:
nfc: llcp: read llcp_sock->local under the socket lock in getsockopt
nfc_llcp_getsockopt() read llcp...
|
7.8 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-90224
In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: fix double completion race in nci_data_exchange_complete
nci_close_device() and nci_rx_wor...
|
7.5 High | — | 0,36% | 17 Sep 2026 |
|
CVE-2026-90223
In the Linux kernel, the following vulnerability has been resolved:
nfc: llcp: bound SNL TLV parsing to the skb and add length checks
nfc_llcp_recv_snl() walked the SNL...
|
7.1 High | — | 0,41% | 17 Sep 2026 |
|
CVE-2026-90217
In the Linux kernel, the following vulnerability has been resolved:
bpf: Compare iterator types during state pruning
An iterator stack slot can be MEM_RCU or PTR_UNTRUS...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90210
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure
When bpf_trampoline_update() fail...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90207
In the Linux kernel, the following vulnerability has been resolved:
ALSA: seq: midi: Serialize input teardown with event_input
snd_midi_input_event() must not be runnin...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90205
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: validate orphan slot during inode read
Patch series "ocfs2: validate active orphan slots duri...
|
7.8 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-90204
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: validate DIO orphan slot during inode read
[BUG]
A corrupted append-DIO dinode (high byte at...
|
7.8 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-90203
In the Linux kernel, the following vulnerability has been resolved:
Squashfs: check block offset is not negative
If a negative offset is read off disk (for example the...
|
7.1 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90199
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: reject out-of-range evcn in mi_enum_attr()
In mi_enum_attr(), the start/end VCN validation...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90191
In the Linux kernel, the following vulnerability has been resolved:
mailbox: riscv-sbi-mpxy: validate RPMI notification lengths
The SBI return value controls how many b...
|
8.4 High | — | 0,19% | 17 Sep 2026 |
|
CVE-2026-90177
In the Linux kernel, the following vulnerability has been resolved:
bpf: Check pointer type for all atomic RMW paths
Atomic RMW verification records an instruction poin...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90176
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Do not skip lock checks for single-byte ranges
check_lock_range() uses inclusive ranges. Its...
|
8.1 High | — | 0,50% | 17 Sep 2026 |
|
CVE-2026-90174
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()
ksmbd_alloc_user() copies resp->hash_sz byt...
|
7.1 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90173
In the Linux kernel, the following vulnerability has been resolved:
smb: smbdirect: free completion queues with ib_free_cq()
smbdirect_connection_destroy_qp() creates t...
|
9.8 Critical | — | 0,55% | 17 Sep 2026 |
|
CVE-2026-90172
In the Linux kernel, the following vulnerability has been resolved:
smb: smbdirect: destroy QP before mem pools on accept failure
On the rdma_accept_failed error path o...
|
7.5 High | — | 0,49% | 17 Sep 2026 |
|
CVE-2026-90162
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: defer publishing granted locks to prevent UAF/double-free race
In smb2_lock(), mid-batch gran...
|
8.8 High | — | 0,63% | 17 Sep 2026 |
|
CVE-2026-90161
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix interlaced ztailpacking pclusters
On-disk sizes of interlaced pclusters should be block-a...
|
7.1 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-90153
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size
smb_check_perm_dacl() validates that the D...
|
8.1 High | — | 0,48% | 17 Sep 2026 |
|
CVE-2026-90151
In the Linux kernel, the following vulnerability has been resolved:
NFSv4: remove callback IDR entry on client allocation failure
nfs4_alloc_client() allocates an NFSv4...
|
9.8 Critical | — | 0,74% | 17 Sep 2026 |
|
CVE-2026-90149
In the Linux kernel, the following vulnerability has been resolved:
NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers
flexfiles accepts NFSv4.0 data server...
|
7.5 High | — | 0,59% | 17 Sep 2026 |
|
CVE-2026-90146
In the Linux kernel, the following vulnerability has been resolved:
bpf, xdp: move offload check into dev_xdp_install()
bpf_xdp_link_update() calls dev_xdp_install() di...
|
7.8 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-90145
In the Linux kernel, the following vulnerability has been resolved:
hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed
Previously, hini...
|
7.1 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90143
In the Linux kernel, the following vulnerability has been resolved:
net: kcm: Hold RCU read lock while running BPF parser
kcm_parse_func_strparser() calls bpf_prog_run_...
|
7.8 High | — | 0,16% | 17 Sep 2026 |