Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-90032
In the Linux kernel, the following vulnerability has been resolved:
media: usbtv: keep device alive while ALSA card exists
The ALSA PCM callbacks store the driver state...
|
7.8 High | — | 0,15% | 16 Sep 2026 |
|
CVE-2026-90030
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: clear forceRM when issuing EndTransfer
The forceRM bit of the DEPCMD register controls th...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-90027
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop
cc_debounce_dwork is queued from the...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-90026
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: qcom-pmic: cancel reset_work on stop
pdphy_stop() disables IRQs but leaves reset_work pe...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-90025
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: displayport: Fix OOB altmode array index
The UCSI displayport driver indexes the c...
|
7.7 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90022
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_midi2: fix use-after-free in string attribute show path
f_midi2_opts_str_show() takes...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90018
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
rtw_get_wps_attr() walks WPS...
|
8.8 High | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-90017
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()
rtw_action_frame_parse() takes a frame_...
|
7.1 High | — | 0,36% | 16 Sep 2026 |
|
CVE-2026-90016
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()
rtw_restruct_wmm_ie() scans in_ie for a WM...
|
7.1 High | — | 0,40% | 16 Sep 2026 |
|
CVE-2026-90014
In the Linux kernel, the following vulnerability has been resolved:
tracing: Have show_event_filters/triggers files take trace array ref
The newly added files show_even...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90013
In the Linux kernel, the following vulnerability has been resolved:
tracing: Take trace_array reference when opening options file
The options files do not take the trac...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90012
In the Linux kernel, the following vulnerability has been resolved:
spi: Fix DMA mapping ownership on partial map failure
If RX mapping fails after TX mapping succeeds,...
|
9.8 Critical | — | 0,63% | 16 Sep 2026 |
|
CVE-2026-90011
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Reserve a terminator byte for the login payload
iscsi_target_check_login_reques...
|
9.1 Critical | — | 0,82% | 16 Sep 2026 |
|
CVE-2026-90010
In the Linux kernel, the following vulnerability has been resolved:
scsi: bsg: Cap io_uring sense copy to max_response_len
Completion copied scmd->sense_len to the user...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90009
In the Linux kernel, the following vulnerability has been resolved:
scsi: bsg: Fix TOCTOU in io_uring passthrough command setup
scsi_bsg_uring_cmd() reads bsg_uring_cmd...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90008
In the Linux kernel, the following vulnerability has been resolved:
scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame
megasas_make_prp_nvme() builds a...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90007
In the Linux kernel, the following vulnerability has been resolved:
scsi: pm8001: Use rollback index when freeing MSI-X vectors
pm8001_request_msix() unwinds previously...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-90003
In the Linux kernel, the following vulnerability has been resolved:
futex: Prevent rcuwait use-after-free during requeue PI
On PREEMPT_RT, FUTEX_CMP_REQUEUE_PI can trig...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-90002
In the Linux kernel, the following vulnerability has been resolved:
ftrace: Take trace_array reference before accessing its ftrace_ops
The trace instance files set_ftra...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90001
In the Linux kernel, the following vulnerability has been resolved:
HID: bpf: serialize device reference release in struct_ops destroy path
__hid_bpf_ops_destroy_device...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-90000
In the Linux kernel, the following vulnerability has been resolved:
HID: rmi: fix OOB access with undersized RMI reports
The hid-rmi driver sizes its writeReport/readRe...
|
8.8 High | — | 0,35% | 16 Sep 2026 |
|
CVE-2026-89999
In the Linux kernel, the following vulnerability has been resolved:
HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
wacom_intuos_pro2_bt_irq() receives t...
|
8.1 High | — | 0,36% | 16 Sep 2026 |
|
CVE-2026-89998
In the Linux kernel, the following vulnerability has been resolved:
dm: fix race when loading and unloading a table
If the userspace calls two concurrent table load ioc...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-8462
SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allows a remote unauthenticated attacker to access or...
|
8.9 High | — | 0,51% | 16 Sep 2026 |
|
CVE-2026-89997
In the Linux kernel, the following vulnerability has been resolved:
dm: fix resume-vs-remove race
If the user issues the resume ioctl and the remove ioctl at the same
t...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89995
In the Linux kernel, the following vulnerability has been resolved:
dma-direct: return struct page from dma_direct_alloc_from_pool()
Commit 5b138c534fda ("dma-direct: f...
|
8.8 High | — | 0,32% | 16 Sep 2026 |
|
CVE-2026-89994
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: fsl-edma: tracing: no ptr dereference during log output
The fsl edma events store a point...
|
7.8 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89992
In the Linux kernel, the following vulnerability has been resolved:
cpuidle: dt_idle_genpd: kfree() the original name allocation
dt_idle_pd_alloc() kasprintf()s the ful...
|
8.4 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89990
In the Linux kernel, the following vulnerability has been resolved:
ceph: lock mutex in ceph_mds_check_access()
MDS session OPEN handling replaces mdsc->s_cap_auths und...
|
9.8 Critical | — | 0,61% | 16 Sep 2026 |
|
CVE-2026-89988
In the Linux kernel, the following vulnerability has been resolved:
kprobes: Protect kprobe_blacklist with RCU
__within_kprobe_blacklist() traverses kprobe_blacklist wi...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89986
In the Linux kernel, the following vulnerability has been resolved:
mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()
syzbot reported a sl...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89985
In the Linux kernel, the following vulnerability has been resolved:
memcg: keep folio's objcg same as its node
memcg_reparent_objcgs() has an inherent assumption that a...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89980
In the Linux kernel, the following vulnerability has been resolved:
ALSA: harmony: initialize locks before requesting IRQ
snd_harmony_create() registers the IRQ before...
|
8.4 High | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89979
In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Fix race between non-atomic ops and trigger-start
We protect the races of the concurrent...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89974
In the Linux kernel, the following vulnerability has been resolved:
nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
nvmf_create_ctrl() owns the f...
|
7.5 High | — | 0,29% | 16 Sep 2026 |
|
CVE-2026-89973
In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: check the data direction of a C2HData PDU
nvme_tcp_handle_c2h_data() finds the request by...
|
8.2 High | — | 0,60% | 16 Sep 2026 |
|
CVE-2026-89972
In the Linux kernel, the following vulnerability has been resolved:
nvme: add missing SRCU grace period in error path
nvme_alloc_ns() error path at out_unlink_ns remove...
|
9.8 Critical | — | 0,64% | 16 Sep 2026 |
|
CVE-2026-89971
In the Linux kernel, the following vulnerability has been resolved:
nvme: skip the zoned limits update if the zone info query failed
nvme_query_zone_info() returns eith...
|
7.5 High | — | 0,60% | 16 Sep 2026 |
|
CVE-2026-89970
In the Linux kernel, the following vulnerability has been resolved:
nvmet-auth: Synchronize timeout work during SQ teardown
nvmet_auth_sq_free() cancels auth_expired_wo...
|
9.8 Critical | — | 0,80% | 16 Sep 2026 |
|
CVE-2026-89969
In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
nvmet_tcp_try_recv_pdu() reads a...
|
9.8 Critical | — | 0,71% | 16 Sep 2026 |
|
CVE-2026-89968
In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp: reject unsolicited H2CData PDUs
nvmet_tcp_handle_h2c_data_pdu() accepts an H2CData PDU af...
|
7.5 High | — | 0,82% | 16 Sep 2026 |
|
CVE-2026-89967
In the Linux kernel, the following vulnerability has been resolved:
mm/migrate_device: avoid out-of-bounds writes for compound folios
migrate_device_range() and migrate...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89965
In the Linux kernel, the following vulnerability has been resolved:
nvdimm/btt: reject an arena whose nfree is below the lane count
The BTT info block's nfree field, th...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89961
In the Linux kernel, the following vulnerability has been resolved:
powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
vmemmap_populate_compound_pag...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89960
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
In vfio_ap_mdev_set_kvm...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89959
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
The vfio_ap_config_remove functi...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89957
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed
The vfio_ap_mdev_hot_unp...
|
8.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89954
In the Linux kernel, the following vulnerability has been resolved:
mtd: afs: validate v2 image info bounds
The AFS v2 parser uses footer[8] to locate the image informa...
|
8.0 High | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89951
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: fix stale receive device on merged fragments
Fragment reassembly reuses the skb from the...
|
8.8 High | — | 0,35% | 16 Sep 2026 |
|
CVE-2026-89947
In the Linux kernel, the following vulnerability has been resolved:
clk: meson: align gxbb_32k_clk_sel number of parents with actual count
The following out-of-bounds r...
|
8.0 High | — | 0,18% | 16 Sep 2026 |