Katalog CVE (hal. 411)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.594 (Critical 36.242 · High 104.951 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 00:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 20.501–20.550 dari 262.594 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-89699 In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4_decode_create() accepts an unbounded cr_d...	7.5 High	—	0,50%	11 Sep 2026
CVE-2026-89702 In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server sockaddr slot by xpt_locallen The nfsd_fh_verify and nfsd_fh_verify_err...	9.8 Critical	—	0,46%	11 Sep 2026
CVE-2026-89703 In the Linux kernel, the following vulnerability has been resolved: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations nfsd4_drop_revoked_stid() handl...	9.8 Critical	—	0,62%	11 Sep 2026
CVE-2026-89704 In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async COPY loop _nfsd_copy_file_range() samples dst->f_wb...	7.5 High	—	0,53%	11 Sep 2026
CVE-2026-89705 In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths nfsd_dispatch() sets rq_st...	7.1 High	—	0,16%	11 Sep 2026
CVE-2026-89690 In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpc_status UAF The rpc_status netlink dumpit walks every in...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-89691 In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to prevent OOB read nfsd4_release_compoundargs() resets ar...	7.1 High	—	0,13%	11 Sep 2026
CVE-2026-89692 In the Linux kernel, the following vulnerability has been resolved: nfsd: clear CALLBACK_RUNNING on failed delegation recall queue nfsd_break_one_deleg() sets NFSD4_CAL...	7.5 High	—	0,61%	11 Sep 2026
CVE-2026-89695 In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4_decode_posixacl() reads a u32 entry count...	7.5 High	—	0,49%	11 Sep 2026
CVE-2026-89696 In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref When CONFIG_NFSD_V4_2_INTER_SSC...	7.5 High	—	0,75%	11 Sep 2026
CVE-2026-89697 In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() The BOTH_TIME_SET branch...	9.1 Critical	—	0,70%	11 Sep 2026
CVE-2026-89682 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net nfsd_file_dispose_list_delayed...	8.1 High	—	0,55%	11 Sep 2026
CVE-2026-89684 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4_init_cp_state nfs4_alloc_init_cpntf_state() published the new c...	7.5 High	—	0,50%	11 Sep 2026
CVE-2026-89685 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix clock domain mismatch in clients_still_reclaiming() clients_still_reclaiming() computes a...	7.5 High	—	0,44%	11 Sep 2026
CVE-2026-89686 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke nfsd4_alloc_layout_statei...	9.8 Critical	—	0,66%	11 Sep 2026
CVE-2026-89687 In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file ->atomic_open is permitted to ret...	7.5 High	—	0,49%	11 Sep 2026
CVE-2026-89688 In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry In nfs4_preprocess_seqid_op() t...	9.8 Critical	—	0,74%	11 Sep 2026
CVE-2026-89689 In the Linux kernel, the following vulnerability has been resolved: nfsd: don't free session slots that are still in use nfsd4_sequence() can free the very slot it is c...	9.8 Critical	—	0,61%	11 Sep 2026
CVE-2026-89674 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget The XDR buffer size calculation in nfs...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-89675 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and shutdown An async copy could be freed or used after free whil...	9.8 Critical	—	0,44%	11 Sep 2026
CVE-2026-89676 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY For an async COPY, nfsd4_copy() called nfs4...	9.8 Critical	—	0,46%	11 Sep 2026
CVE-2026-89677 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() dentry_create() can hypothetica...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89678 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix partial-write detection in nfsd_direct_write nfsd_direct_write() walks a list of write seg...	7.5 High	—	0,38%	11 Sep 2026
CVE-2026-89679 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs When a SETATTR request include...	7.5 High	—	0,72%	11 Sep 2026
CVE-2026-89680 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup failure When nfsd4_setup_inter_ssc() fails, nfsd...	7.5 High	—	0,65%	11 Sep 2026
CVE-2026-89681 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORK_STRUCT_PENDING be...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89667 In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and...	8.1 High	—	0,54%	11 Sep 2026
CVE-2026-89668 In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() nfsd_debugfs_init() runs befo...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-89669 In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4_copy_notify() finished initializing...	9.8 Critical	—	0,69%	11 Sep 2026
CVE-2026-89670 In the Linux kernel, the following vulnerability has been resolved: nfsd: hold rcu across localio cmpxchg retry nfsd_file objects are freed via call_rcu (filecache.c:29...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89671 In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp->mask nfsd3_proc_setacl() calls set_posix_acl() unconditionally for b...	9.1 Critical	—	0,50%	11 Sep 2026
CVE-2026-89672 In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp->mask The NFSACL v2 SETACL path shares the decoder convention used by...	9.1 Critical	—	0,52%	11 Sep 2026
CVE-2026-89658 In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup nfs40_clean_admin_revoked()...	9.8 Critical	—	0,62%	11 Sep 2026
CVE-2026-89659 In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during delegation revoke A delegation stateid holds only a bare...	9.8 Critical	—	0,44%	11 Sep 2026
CVE-2026-89660 In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointe...	9.8 Critical	—	0,62%	11 Sep 2026
CVE-2026-89662 In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown __destroy_client() releases a client'...	9.8 Critical	—	0,69%	11 Sep 2026
CVE-2026-89663 In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify stateids live in the s...	8.8 High	—	0,46%	11 Sep 2026
CVE-2026-89664 In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via op_release nfsd4_decode_createhow4() calls nfsd4_decode_fa...	7.5 High	—	0,49%	11 Sep 2026
CVE-2026-89665 In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire...	8.2 High	—	0,62%	11 Sep 2026
CVE-2026-89650 In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_export_targets array for mds info v2/v3 ceph_mdsmap_decode() in fs/ceph/mdsmap.c rea...	9.1 Critical	—	0,50%	11 Sep 2026
CVE-2026-89651 In the Linux kernel, the following vulnerability has been resolved: ceph: bound MDSCapAuth path and fs_name decode in handle_session() handle_session() decodes the MDSC...	9.8 Critical	—	0,64%	11 Sep 2026
CVE-2026-89652 In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get_name ceph_get_name() copies the MDS-supplied...	9.8 Critical	—	0,46%	11 Sep 2026
CVE-2026-89653 In the Linux kernel, the following vulnerability has been resolved: ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode MDSMap export_targets entries are...	9.8 Critical	—	0,50%	11 Sep 2026
CVE-2026-89654 In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on session freed during unlock check_new_map() iterates mdsc->sessi...	9.8 Critical	—	0,67%	11 Sep 2026
CVE-2026-89655 In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock list_for_each_entry() iterat...	9.8 Critical	—	0,71%	11 Sep 2026
CVE-2026-89656 In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crush_decode() stores bucket data by array slot, a...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-89657 In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osd_client.c:osd_sparse_read() vali...	7.5 High	—	0,61%	11 Sep 2026
CVE-2026-89643 In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove audit_del_rule() is used for both ne...	9.8 Critical	—	0,71%	11 Sep 2026
CVE-2026-89646 In the Linux kernel, the following vulnerability has been resolved: ceph: fix leaked inode reference on writeback abort at umount ceph_dirty_folio() takes a wrbuffer cl...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89647 In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph_trim_dentries() if no progress possible ceph_cap_reclaim_work() re-queues i...	7.5 High	—	0,62%	11 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.