Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-89893
In the Linux kernel, the following vulnerability has been resolved:
media: cx23885: cancel NetUP CI work before teardown
netup_ci_exit() frees a netup_ci_state while it...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89890
In the Linux kernel, the following vulnerability has been resolved:
media: go7007: defer the ALSA v4l2 put until card release
go7007_snd_init() already takes a v4l2_dev...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89888
In the Linux kernel, the following vulnerability has been resolved:
media: i2c: ov02a10: fix endpoint parsing use-after-free
The ov02a10_check_hwcfg() function calls fw...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89887
In the Linux kernel, the following vulnerability has been resolved:
media: i2c: ov7740: fix use-after-destroy in remove
The ov7740_remove() function had a severe teardo...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89885
In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Fix SCP device refcounting
mdp_probe() first tries to get the SCP handle...
|
8.4 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89883
In the Linux kernel, the following vulnerability has been resolved:
media: rc: sunxi-cir: Unregister rc device on probe failure
After rc_register_device() succeeds, lat...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89882
In the Linux kernel, the following vulnerability has been resolved:
media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow
st_ref_pic_set_prediction() comput...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89880
In the Linux kernel, the following vulnerability has been resolved:
media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure
rtl2832_sdr_start_s...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89877
In the Linux kernel, the following vulnerability has been resolved:
media: saa7164: fix cleanup on resource allocation failure
saa7164_dev_setup() adds the device to th...
|
8.4 High | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-89875
In the Linux kernel, the following vulnerability has been resolved:
media: ti: vpe: quiesce overflow recovery before freeing streams
The VIP overflow recovery worker is...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89873
In the Linux kernel, the following vulnerability has been resolved:
media: v4l2-ctrls: validate HEVC EXT SPS RPS counts
The HEVC SPS control carries the short-term and...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89870
In the Linux kernel, the following vulnerability has been resolved:
media: zoran: Avoid freeing a registered video_device twice
zoran_init_video_device() installs zoran...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89863
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
qla_chk_edif_rx_sa_delete_pending(...
|
7.5 High | — | 0,67% | 16 Sep 2026 |
|
CVE-2026-89861
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
In the format 1 path, the vir...
|
8.1 High | — | 0,57% | 16 Sep 2026 |
|
CVE-2026-89860
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Initialize NVMe abort_work once at submission
qla_nvme_fcp_abort() and qla_nvme_ls_ab...
|
8.8 High | — | 0,33% | 16 Sep 2026 |
|
CVE-2026-89857
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
qla_nvme_ls_reject_iocb() allocates from...
|
9.8 Critical | — | 0,62% | 16 Sep 2026 |
|
CVE-2026-89856
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
ha->msix_count is u16, but ha->m...
|
8.4 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89854
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
qla84xx_put_chip() drops the last referenc...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89849
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
qla2x00_status_entry() filters out non-T...
|
8.8 High | — | 0,35% | 16 Sep 2026 |
|
CVE-2026-89848
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Quiesce response IRQ before freeing request queue
qla2xxx_delete_qpair() deletes the...
|
8.1 High | — | 0,52% | 16 Sep 2026 |
|
CVE-2026-89847
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Avoid double completion in async IOCB timeout
qla2x00_async_iocb_timeout() tries to a...
|
9.8 Critical | — | 0,68% | 16 Sep 2026 |
|
CVE-2026-89846
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
In qla2x00_status_entry(), the FWI2 s...
|
9.1 Critical | — | 0,71% | 16 Sep 2026 |
|
CVE-2026-89844
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
qla24xx_report_id_acqui...
|
8.8 High | — | 0,34% | 16 Sep 2026 |
|
CVE-2026-89841
In the Linux kernel, the following vulnerability has been resolved:
f2fs: only redirty pinned folios in redirty_blocks
redirty_blocks() pins folios with read_cache_foli...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89840
In the Linux kernel, the following vulnerability has been resolved:
f2fs: validate MOVE_RANGE destination size
F2FS_IOC_MOVE_RANGE checks the source range, but not the...
|
7.1 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89838
In the Linux kernel, the following vulnerability has been resolved:
f2fs: limit recovery filename logging to stored length
F2FS stores recovery filenames as a length pl...
|
7.1 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89836
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix folio_nr_pages() race after put in large folio invalidate
Our v6.18 based Android system i...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89832
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to clear dirty flag on folio in error path
If node block is corrupted due to chksum mismat...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89829
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()
Otherwise in f2fs_sanity_check_nod...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89826
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: harden firmware build-info bounds checks
panthor_fw_read_build_info() checks whether th...
|
7.1 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89825
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: fix firmware control interface bounds checks
panthor_init_cs_iface() and panthor_init_c...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89823
In the Linux kernel, the following vulnerability has been resolved:
drm: fix race between partial drm_dev_register() failure and ioctl
If drm_dev_register() fails after...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89819
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: validate plane degamma LUT size for private color prop
Unlike the CRTC degamma path...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89818
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check
If the supplied msg[2] (num_buffe...
|
7.1 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89815
In the Linux kernel, the following vulnerability has been resolved:
drm/ttm: Drop tt->restore after successful restore
ttm_pool_restore_and_alloc() can successfully com...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89814
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: clamp the isolation index for rings outside a partition
adev->isolation[] has one slot p...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89811
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Add TLB flush after MES queue eviction/suspension
MES (Micro Engine Scheduler) does not...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89810
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix error path at svm_migrate_copy_to_ram
If page migration from device to sys ram fails...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89808
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram
When migration vm range i...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89806
In the Linux kernel, the following vulnerability has been resolved:
drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation
The framebuffer size calculation `fb_s...
|
8.4 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89805
In the Linux kernel, the following vulnerability has been resolved:
drm/pagemap: Fix folio allocation fallback and use-after-put
drm_pagemap_migrate_populate_ram_pfn()...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89804
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau/dmem: fix mismatched DMA unmap size for large folios
Device-private THP migration maps m...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89803
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: unsubscribe the channel-kill event before the fence context
nouveau_channel_del() tears...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89801
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
In nouveau_uvmm_bind_job_submi...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89799
In the Linux kernel, the following vulnerability has been resolved:
bpf: Disable preemption in bpf_get_stackid
The get_perf_callchain call needs disabled preemption plu...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89795
In the Linux kernel, the following vulnerability has been resolved:
PCI: Allow per function PCI slots to fix slot reset on s390
On s390 systems, which use a machine lev...
|
8.4 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-86585
The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the deliv...
|
7.7 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-86107
The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerabil...
|
5.9 Medium | — | 0,37% | 16 Sep 2026 |
|
CVE-2026-86106
An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated co...
|
9.6 Critical | — | 0,36% | 16 Sep 2026 |
|
CVE-2026-14916
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise....
|
7.7 High | — | 0,67% | 16 Sep 2026 |