Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-89985
In the Linux kernel, the following vulnerability has been resolved:
memcg: keep folio's objcg same as its node
memcg_reparent_objcgs() has an inherent assumption that a...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89980
In the Linux kernel, the following vulnerability has been resolved:
ALSA: harmony: initialize locks before requesting IRQ
snd_harmony_create() registers the IRQ before...
|
8.4 High | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89979
In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Fix race between non-atomic ops and trigger-start
We protect the races of the concurrent...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89974
In the Linux kernel, the following vulnerability has been resolved:
nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
nvmf_create_ctrl() owns the f...
|
7.5 High | — | 0,29% | 16 Sep 2026 |
|
CVE-2026-89973
In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: check the data direction of a C2HData PDU
nvme_tcp_handle_c2h_data() finds the request by...
|
8.2 High | — | 0,60% | 16 Sep 2026 |
|
CVE-2026-89972
In the Linux kernel, the following vulnerability has been resolved:
nvme: add missing SRCU grace period in error path
nvme_alloc_ns() error path at out_unlink_ns remove...
|
9.8 Critical | — | 0,64% | 16 Sep 2026 |
|
CVE-2026-89971
In the Linux kernel, the following vulnerability has been resolved:
nvme: skip the zoned limits update if the zone info query failed
nvme_query_zone_info() returns eith...
|
7.5 High | — | 0,60% | 16 Sep 2026 |
|
CVE-2026-89970
In the Linux kernel, the following vulnerability has been resolved:
nvmet-auth: Synchronize timeout work during SQ teardown
nvmet_auth_sq_free() cancels auth_expired_wo...
|
9.8 Critical | — | 0,80% | 16 Sep 2026 |
|
CVE-2026-89969
In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
nvmet_tcp_try_recv_pdu() reads a...
|
9.8 Critical | — | 0,71% | 16 Sep 2026 |
|
CVE-2026-89968
In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp: reject unsolicited H2CData PDUs
nvmet_tcp_handle_h2c_data_pdu() accepts an H2CData PDU af...
|
7.5 High | — | 0,82% | 16 Sep 2026 |
|
CVE-2026-89967
In the Linux kernel, the following vulnerability has been resolved:
mm/migrate_device: avoid out-of-bounds writes for compound folios
migrate_device_range() and migrate...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89965
In the Linux kernel, the following vulnerability has been resolved:
nvdimm/btt: reject an arena whose nfree is below the lane count
The BTT info block's nfree field, th...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89961
In the Linux kernel, the following vulnerability has been resolved:
powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
vmemmap_populate_compound_pag...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89960
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
In vfio_ap_mdev_set_kvm...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89959
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
The vfio_ap_config_remove functi...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89957
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed
The vfio_ap_mdev_hot_unp...
|
8.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89954
In the Linux kernel, the following vulnerability has been resolved:
mtd: afs: validate v2 image info bounds
The AFS v2 parser uses footer[8] to locate the image informa...
|
8.0 High | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89951
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: fix stale receive device on merged fragments
Fragment reassembly reuses the skb from the...
|
8.8 High | — | 0,35% | 16 Sep 2026 |
|
CVE-2026-89947
In the Linux kernel, the following vulnerability has been resolved:
clk: meson: align gxbb_32k_clk_sel number of parents with actual count
The following out-of-bounds r...
|
8.0 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89943
In the Linux kernel, the following vulnerability has been resolved:
ASoC: loongson: Fix error handling in ACPI property parsing
In loongson_card_parse_acpi(), the retur...
|
8.4 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89942
In the Linux kernel, the following vulnerability has been resolved:
iio: buffer: Fix potential use-after-free in anonymous buffer release
An anonymous buffer handle hol...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89941
In the Linux kernel, the following vulnerability has been resolved:
iio: buffer: Make IIO DMA fence release RCU-safe
The `dma_fence` documentation states that if a cust...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89940
In the Linux kernel, the following vulnerability has been resolved:
iio: buffer: Tie IIO dma fence lock lifetime to the fence
The `iio_dma_fence` implementation current...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89938
In the Linux kernel, the following vulnerability has been resolved:
iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF
The atlas driver reques...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89932
In the Linux kernel, the following vulnerability has been resolved:
KVM: nVMX: Always flush vpid02 on first use
Make sure vpid02 is always flushed on first use by setti...
|
8.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89930
In the Linux kernel, the following vulnerability has been resolved:
KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
KVM services local TLB flushes on "fu...
|
9.3 Critical | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89929
In the Linux kernel, the following vulnerability has been resolved:
KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
When emulating INVVPID, KVM execute...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89928
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk
__kvm_rmap_lock() deliberately...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89927
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
Fix an issue where userspace or the guest...
|
7.1 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89922
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: Take srcu when importing watchpoint data
__import_wp_info() backs up the original guest m...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89920
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: Fix memory corruption by not reinjecting CK machine checks
Channel-subsystem damage machi...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89919
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: keyop: use mmu_lock to read gmap->asce
Every other dat_* consumer in this file (kvm_s390_...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89918
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Correctly handle end of VA space TLBI invalidation
Our TLB invalidation by VA code is ba...
|
9.3 Critical | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89916
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
A VNCR TLB invalidation can...
|
9.3 Critical | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89915
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Remove VM-wide VNCR mapping counter
The global VNCR mapping counter is used to decide wh...
|
9.3 Critical | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89914
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Sign-extend VA for range-based TLBI invalidation
When the decode_range_tlbi() helper was...
|
9.3 Critical | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89913
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
vgic_v3_save_pending_table...
|
8.8 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89912
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
MAPC with V=0 drops ite->colle...
|
7.1 High | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89911
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Correctly cap TLBI Range to the architural limit
TLB Invalidation by Range has a fairly...
|
7.9 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89910
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc
Variable vector[] is declared on...
|
7.3 High | — | 0,15% | 16 Sep 2026 |
|
CVE-2026-89908
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY
kvm_arch_prepare_memory_region() co...
|
8.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89907
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Validate MSI data before routing it to EIOINTC
pch_msi_set_irq() passes e->msi.data...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89906
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: BPF: Refactor jump offset calculation in tail call
The old macro-based jmp_offset calcula...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89904
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Fix acpi_package_ids[] array overflow
With LoongArch virt machine, a typical setting is o...
|
8.4 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89903
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Do not save/restore percpu base register in rethook trampoline
The rethook trampoline sav...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89902
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Avoid preempt count underflow without probe
LoongArch uses break 11 for the breakpoint pl...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89899
In the Linux kernel, the following vulnerability has been resolved:
media: cec: disable delayed work before freeing an interrupted transmit
cec_transmit_msg_fh() drops...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89898
In the Linux kernel, the following vulnerability has been resolved:
media: cec: extron-da-hd-4k-plus: add sanity check
Add check to prevent overflowing msg.msg[] in cas...
|
8.8 High | — | 0,38% | 16 Sep 2026 |
|
CVE-2026-89897
In the Linux kernel, the following vulnerability has been resolved:
media: cec: Serialize exclusive follower delivery
cec_receive_notify() reads the exclusive follower...
|
7.5 High | — | 0,31% | 16 Sep 2026 |
|
CVE-2026-89894
In the Linux kernel, the following vulnerability has been resolved:
media: cx231xx: reject geometry changes while the VBI queue is busy
vidioc_s_fmt_vid_cap() and vidio...
|
7.8 High | — | 0,16% | 16 Sep 2026 |