Katalog CVE (hal. 413)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.594 (Critical 36.242 · High 104.951 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 00:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 20.601–20.650 dari 262.594 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-89571 In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the input buffer fwctl_cmd_rpc() copies cmd->in_len byt...	7.1 High	—	0,16%	11 Sep 2026
CVE-2026-89573 In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's array_block_check() can only co...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89574 In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read array_block_check() validates blocknr and csum and no...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89562 In the Linux kernel, the following vulnerability has been resolved: ip6_gre: fix hardware header length for NBMA tunnels ip6gre_tnl_link_config_route() accumulates the...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89563 In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() ip6_tnl_xmit() may need to expand headroom before i...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89564 In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forwarding IPv4 and IPv6 input preserve an skb->sk assoc...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89569 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: serialize security confirmation handling rfcomm_security_cfm() looks up a session...	8.8 High	—	0,34%	11 Sep 2026
CVE-2026-89554 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction mptcp_token_join_cookie_init_s...	8.2 High	—	0,60%	11 Sep 2026
CVE-2026-89555 In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull() mpls_select_multipath() calls mpls_multipath_hash() to cho...	9.8 Critical	—	0,69%	11 Sep 2026
CVE-2026-89557 In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb->bblog_shift in super_1_load() In super_1_load(), sb->bblog_shift is an...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89558 In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix still_degraded being inverted in raid10_sync_request() Commit fe6a19d40ceb ("md/md-bi...	9.8 Critical	—	0,64%	11 Sep 2026
CVE-2026-89559 In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() The on-media namespace index fie...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89560 In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation Whiteout objects are used in the...	8.4 High	—	0,13%	11 Sep 2026
CVE-2026-89561 In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() ipv6_rpl_srh_rcv() dereferences idev f...	7.5 High	—	0,44%	11 Sep 2026
CVE-2026-89547 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation __svc_create() initializes three per-pool percpu_co...	8.1 High	—	0,56%	11 Sep 2026
CVE-2026-89548 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: always drain cache_cleaner before destroying a cache_detail sunrpc_destroy_cache_detail() on...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89549 In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc_pool_for_cpu() svc_set_num_threads() spreads the requested...	7.5 High	—	0,71%	11 Sep 2026
CVE-2026-89550 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: enforce krb5 token minimum length svcauth_gss_unwrap_priv() validates only an u...	9.8 Critical	—	0,46%	11 Sep 2026
CVE-2026-89551 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow xdr_buf_trim() trims `len` bytes from the ta...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-89553 In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non-uvmm path, there coul...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89540 In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp_lock before publishing proc entry create_use_gss_proxy_proc_entry() publishes /pro...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89541 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length checks gss_unwrap_resp_priv() validates the RPCSEC_GSS op...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-89542 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens gss_krb5_unwrap_v2() reads the EC and RRC hea...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-89544 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssx_dec_option_array error path bugs Four coupled defects in the gssx XDR option-array...	7.5 High	—	0,59%	11 Sep 2026
CVE-2026-89545 In the Linux kernel, the following vulnerability has been resolved: sunrpc: defer rq_argp and rq_resp free until after RCU grace period svc_rqst_free() frees rqstp->rq_...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-89546 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: close backchannel before destroying callback service A backchannel receive can complete a re...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89532 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pcl_for_each_segment for empty chunks When a parsed chunk list contains a chunk whose c...	9.1 Critical	—	0,50%	11 Sep 2026
CVE-2026-89533 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix offset arithmetic in read_chunk_range svc_rdma_read_chunk_range() walks a Read chunk's...	9.8 Critical	—	0,50%	11 Sep 2026
CVE-2026-89534 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails When svc_rdma_listen_handler() handles RD...	8.8 High	—	0,24%	11 Sep 2026
CVE-2026-89535 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id svc_rdma_free() caches rdma->sc_cm_id-...	8.1 High	—	0,54%	11 Sep 2026
CVE-2026-89536 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake callback xs_tls_handshake_sync() gives xs_tls_handsh...	9.8 Critical	—	0,64%	11 Sep 2026
CVE-2026-89537 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 gss_krb5_verify_mic_v2() reads th...	9.1 Critical	—	0,65%	11 Sep 2026
CVE-2026-89538 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gss_krb5_unwrap_v2() sets buf->len to a l...	9.8 Critical	—	0,71%	11 Sep 2026
CVE-2026-89523 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel pending mlo_pm_work If the device is reset, suspended or unregistered wit...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89524 In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6kl_cfg80211_con...	8.1 High	—	0,27%	11 Sep 2026
CVE-2026-89526 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field...	9.8 Critical	—	0,64%	11 Sep 2026
CVE-2026-89528 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths are validated...	7.5 High	—	0,67%	11 Sep 2026
CVE-2026-89530 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject inline replies that overflow the pull-up buffer An RPC-over-RDMA client can request...	9.8 Critical	—	0,46%	11 Sep 2026
CVE-2026-89520 In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's pick_next_task() o...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-89521 In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle pick_task() releasing the rq lock Core scheduling's pick_next_task() breaks when...	7.3 High	—	0,15%	11 Sep 2026
CVE-2026-89522 In the Linux kernel, the following vulnerability has been resolved: media: staging/ipu7: fix async notifier UAF on probe error path isys_register_devices() registers th...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89507 In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_write_cm_event() ctx->file may only be changed under the handler...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89508 In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_set_ib_path() ucma_set_ib_path() calls ucma_event_handler() stra...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89510 In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Cancel reg_work before freeing device on remove c4iw_uld_state_change() queues reg_work...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-89511 In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver...	7.5 High	—	0,71%	11 Sep 2026
CVE-2026-89513 In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Fix PMU event info array size overflow SBI PMU EVENT_GET_INFO stores guest-controlled n...	8.8 High	—	0,17%	11 Sep 2026
CVE-2026-89499 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Stop remote reader update when page swap fails The remote swap_reader_page callback can...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89500 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page Discarding a cached reader page afte...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-89501 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf Because, ring_buffer_subbuf_order_set() ca...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89503 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() ring_buffer_alloc_read_page()...	7.8 High	—	0,16%	11 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.