Katalog CVE (hal. 412)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.594 (Critical 36.242 · High 104.951 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 00:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 20.551–20.600 dari 262.594 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-89648 In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph_parse_deleg_inos() ceph_parse_deleg_inos() decodes interval...	7.5 High	—	0,63%	11 Sep 2026
CVE-2026-89649 In the Linux kernel, the following vulnerability has been resolved: ceph: bound xattr value length in __build_xattrs() __build_xattrs() decodes the MDS-supplied xattr b...	9.1 Critical	—	0,68%	11 Sep 2026
CVE-2026-89634 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN() overflow in symlink_data() error context loop The check added by commit 7d9...	9.1 Critical	—	0,69%	11 Sep 2026
CVE-2026-89635 In the Linux kernel, the following vulnerability has been resolved: ksmbd: only rebind the reopened file's own oplock on durable reconnect ksmbd_reopen_durable_fd() wal...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89636 In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce->tgthint in free_tgts() When free_tgts() frees all structures in ce->tlist, ce...	9.8 Critical	—	0,66%	11 Sep 2026
CVE-2026-89637 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 When a valid...	9.8 Critical	—	0,58%	11 Sep 2026
CVE-2026-89638 In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89639 In the Linux kernel, the following vulnerability has been resolved: cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC cifs_do_truncate() is invoked fr...	7.1 High	—	0,17%	11 Sep 2026
CVE-2026-89640 In the Linux kernel, the following vulnerability has been resolved: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 With len == 0 (clone to EOF), th...	7.1 High	—	0,13%	11 Sep 2026
CVE-2026-89641 In the Linux kernel, the following vulnerability has been resolved: cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() When the else branch of cifs_file_...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89626 In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup on failure hid_sensor_custom_add_attributes() cre...	8.8 High	—	0,35%	11 Sep 2026
CVE-2026-89630 In the Linux kernel, the following vulnerability has been resolved: smb: client: restore the data_offset bound in is_valid_oplock_break() Commit 83bfbd0bb902 ("cifs: Re...	9.1 Critical	—	0,54%	11 Sep 2026
CVE-2026-89631 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect response whose byte count is too small CIFSTCon() bounds its strn...	9.1 Critical	—	0,46%	11 Sep 2026
CVE-2026-89632 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() reparse_buf_ptr() reads...	8.2 High	—	0,55%	11 Sep 2026
CVE-2026-89633 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() coalesce_t2() computes...	9.8 Critical	—	0,49%	11 Sep 2026
CVE-2026-89619 In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer quickspi_hid_raw_...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89620 In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: validate report size before copy write_cmd_to_txdma() builds an...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89622 In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcp_i2c_smbus_read() stores the caller-...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-89624 In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universal_pidff_probe() starts...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89610 In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the start...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89611 In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute offsets ntfs_attr_update_meta() shifts the attribute name when...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89612 In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMirr locat...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89613 In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if it has inco...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89614 In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the free-cluster bitmap scan to the volume vol->lcn_empty_bits_per_page is sized from vo...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89615 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound page_lcns[] index by the log record The copy_lcns loop and the redo shorten loop ind...	8.4 High	—	0,15%	11 Sep 2026
CVE-2026-89616 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame() ni_read_frame() decompresses a...	7.5 High	—	0,42%	11 Sep 2026
CVE-2026-89617 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log replay Each DIR_PAGE_ENTRY ends in a page_lcns[] array wh...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89602 In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing z_erofs_gbuf_nrpages is advanced only af...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-89605 In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_message_locked() moves a message con...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89606 In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfs_parse_tag_70_packet() subtracts fixed metadata fi...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89607 In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet parse_tag_3_packet() set encrypt...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89608 In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfs_parse_packet_set() receives a pointer into...	7.1 High	—	0,16%	11 Sep 2026
CVE-2026-89609 In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfs_exorcise_daemon() drops queued...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-89594 In the Linux kernel, the following vulnerability has been resolved: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89596 In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nv_suspend() and nv_resume() wa...	7.1 High	—	0,18%	11 Sep 2026
CVE-2026-89597 In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafb_init() registers the v86d conn...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89599 In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicm_probe() registers the...	8.4 High	—	0,14%	11 Sep 2026
CVE-2026-89600 In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotify_pre_content() builds its file_range on the...	7.8 High	—	0,12%	11 Sep 2026
CVE-2026-89601 In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC inodes ext2_setsize() and ext2_xattr_set2() had a construct...	8.8 High	—	0,60%	11 Sep 2026
CVE-2026-89586 In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes ata_scsi_write_same_xlat() tr...	8.2 High	—	0,62%	11 Sep 2026
CVE-2026-89587 In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: fix stack buffer overflow in query_capability() query_capability() copies four ACP...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89588 In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In ghes_handle_arm_hw_error(), afte...	8.4 High	—	0,19%	11 Sep 2026
CVE-2026-89593 In the Linux kernel, the following vulnerability has been resolved: hugetlb: only adjust reservation during unmapping if mapcount is 0 Since df7a6d1f6405, __unmap_hugep...	7.1 High	—	0,13%	11 Sep 2026
CVE-2026-89579 In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloom_map_alloc() has two 32-bit-spec...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89580 In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_perf_callchain() returns a per-CPU perf_callchain_ent...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89581 In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU ad...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89583 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eir_get_service_data() eir_get_service_data() walks the advertising...	8.1 High	—	0,27%	11 Sep 2026
CVE-2026-89584 In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check t...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89585 In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIG_CHARLCD_BL_FLASH, cha...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89570 In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE not...	7.8 High	—	0,17%	11 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.