Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-89943
In the Linux kernel, the following vulnerability has been resolved:
ASoC: loongson: Fix error handling in ACPI property parsing
In loongson_card_parse_acpi(), the retur...
|
8.4 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89942
In the Linux kernel, the following vulnerability has been resolved:
iio: buffer: Fix potential use-after-free in anonymous buffer release
An anonymous buffer handle hol...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89941
In the Linux kernel, the following vulnerability has been resolved:
iio: buffer: Make IIO DMA fence release RCU-safe
The `dma_fence` documentation states that if a cust...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89940
In the Linux kernel, the following vulnerability has been resolved:
iio: buffer: Tie IIO dma fence lock lifetime to the fence
The `iio_dma_fence` implementation current...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89938
In the Linux kernel, the following vulnerability has been resolved:
iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF
The atlas driver reques...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89932
In the Linux kernel, the following vulnerability has been resolved:
KVM: nVMX: Always flush vpid02 on first use
Make sure vpid02 is always flushed on first use by setti...
|
8.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89930
In the Linux kernel, the following vulnerability has been resolved:
KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
KVM services local TLB flushes on "fu...
|
9.3 Critical | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89929
In the Linux kernel, the following vulnerability has been resolved:
KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
When emulating INVVPID, KVM execute...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89928
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk
__kvm_rmap_lock() deliberately...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89927
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
Fix an issue where userspace or the guest...
|
7.1 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89922
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: Take srcu when importing watchpoint data
__import_wp_info() backs up the original guest m...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89920
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: Fix memory corruption by not reinjecting CK machine checks
Channel-subsystem damage machi...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89919
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: keyop: use mmu_lock to read gmap->asce
Every other dat_* consumer in this file (kvm_s390_...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89918
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Correctly handle end of VA space TLBI invalidation
Our TLB invalidation by VA code is ba...
|
9.3 Critical | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89916
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
A VNCR TLB invalidation can...
|
9.3 Critical | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89915
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Remove VM-wide VNCR mapping counter
The global VNCR mapping counter is used to decide wh...
|
9.3 Critical | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89914
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Sign-extend VA for range-based TLBI invalidation
When the decode_range_tlbi() helper was...
|
9.3 Critical | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89913
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
vgic_v3_save_pending_table...
|
8.8 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89912
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
MAPC with V=0 drops ite->colle...
|
7.1 High | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89911
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Correctly cap TLBI Range to the architural limit
TLB Invalidation by Range has a fairly...
|
7.9 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89910
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc
Variable vector[] is declared on...
|
7.3 High | — | 0,15% | 16 Sep 2026 |
|
CVE-2026-89908
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY
kvm_arch_prepare_memory_region() co...
|
8.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89907
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Validate MSI data before routing it to EIOINTC
pch_msi_set_irq() passes e->msi.data...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89906
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: BPF: Refactor jump offset calculation in tail call
The old macro-based jmp_offset calcula...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89904
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Fix acpi_package_ids[] array overflow
With LoongArch virt machine, a typical setting is o...
|
8.4 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89903
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Do not save/restore percpu base register in rethook trampoline
The rethook trampoline sav...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89902
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Avoid preempt count underflow without probe
LoongArch uses break 11 for the breakpoint pl...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89899
In the Linux kernel, the following vulnerability has been resolved:
media: cec: disable delayed work before freeing an interrupted transmit
cec_transmit_msg_fh() drops...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89898
In the Linux kernel, the following vulnerability has been resolved:
media: cec: extron-da-hd-4k-plus: add sanity check
Add check to prevent overflowing msg.msg[] in cas...
|
8.8 High | — | 0,38% | 16 Sep 2026 |
|
CVE-2026-89897
In the Linux kernel, the following vulnerability has been resolved:
media: cec: Serialize exclusive follower delivery
cec_receive_notify() reads the exclusive follower...
|
7.5 High | — | 0,31% | 16 Sep 2026 |
|
CVE-2026-89894
In the Linux kernel, the following vulnerability has been resolved:
media: cx231xx: reject geometry changes while the VBI queue is busy
vidioc_s_fmt_vid_cap() and vidio...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89893
In the Linux kernel, the following vulnerability has been resolved:
media: cx23885: cancel NetUP CI work before teardown
netup_ci_exit() frees a netup_ci_state while it...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89890
In the Linux kernel, the following vulnerability has been resolved:
media: go7007: defer the ALSA v4l2 put until card release
go7007_snd_init() already takes a v4l2_dev...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89888
In the Linux kernel, the following vulnerability has been resolved:
media: i2c: ov02a10: fix endpoint parsing use-after-free
The ov02a10_check_hwcfg() function calls fw...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89887
In the Linux kernel, the following vulnerability has been resolved:
media: i2c: ov7740: fix use-after-destroy in remove
The ov7740_remove() function had a severe teardo...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89885
In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Fix SCP device refcounting
mdp_probe() first tries to get the SCP handle...
|
8.4 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89883
In the Linux kernel, the following vulnerability has been resolved:
media: rc: sunxi-cir: Unregister rc device on probe failure
After rc_register_device() succeeds, lat...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89882
In the Linux kernel, the following vulnerability has been resolved:
media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow
st_ref_pic_set_prediction() comput...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89880
In the Linux kernel, the following vulnerability has been resolved:
media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure
rtl2832_sdr_start_s...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89877
In the Linux kernel, the following vulnerability has been resolved:
media: saa7164: fix cleanup on resource allocation failure
saa7164_dev_setup() adds the device to th...
|
8.4 High | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89875
In the Linux kernel, the following vulnerability has been resolved:
media: ti: vpe: quiesce overflow recovery before freeing streams
The VIP overflow recovery worker is...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89873
In the Linux kernel, the following vulnerability has been resolved:
media: v4l2-ctrls: validate HEVC EXT SPS RPS counts
The HEVC SPS control carries the short-term and...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89870
In the Linux kernel, the following vulnerability has been resolved:
media: zoran: Avoid freeing a registered video_device twice
zoran_init_video_device() installs zoran...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89863
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
qla_chk_edif_rx_sa_delete_pending(...
|
7.5 High | — | 0,67% | 16 Sep 2026 |
|
CVE-2026-89861
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
In the format 1 path, the vir...
|
8.1 High | — | 0,57% | 16 Sep 2026 |
|
CVE-2026-89860
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Initialize NVMe abort_work once at submission
qla_nvme_fcp_abort() and qla_nvme_ls_ab...
|
8.8 High | — | 0,33% | 16 Sep 2026 |
|
CVE-2026-89857
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
qla_nvme_ls_reject_iocb() allocates from...
|
9.8 Critical | — | 0,62% | 16 Sep 2026 |
|
CVE-2026-89856
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
ha->msix_count is u16, but ha->m...
|
8.4 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89854
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
qla84xx_put_chip() drops the last referenc...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89849
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
qla2x00_status_entry() filters out non-T...
|
8.8 High | — | 0,35% | 16 Sep 2026 |