Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-89504
In the Linux kernel, the following vulnerability has been resolved:
regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer...
|
8.4 High | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-89492
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: validate directory-index entry counts when reading metadata
ocfs2_validate_dx_leaf() and ocfs...
|
9.8 Critical | — | 0,64% | 11 Sep 2026 |
|
CVE-2026-89493
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: validate rl_used against rl_count in refcount block validator
ocfs2_find_refcount_rec_in_rl()...
|
8.8 High | — | 0,65% | 11 Sep 2026 |
|
CVE-2026-89494
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: validate lengths in dlm_mig_lockres_handler
A node receiving a DLM_MIG_LOCKRES message trusts...
|
9.8 Critical | — | 0,71% | 11 Sep 2026 |
|
CVE-2026-89495
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: bound namelen in dlm_migrate_request_handler
Patch series "ocfs2/dlm: bound peer-controlled l...
|
9.8 Critical | — | 0,71% | 11 Sep 2026 |
|
CVE-2026-89497
In the Linux kernel, the following vulnerability has been resolved:
orangefs: skip leading spaces before parsing client debug masks
orangefs_prepare_cdm_array() sizes e...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-89485
In the Linux kernel, the following vulnerability has been resolved:
lockd: pin next file across nlm_inspect_file lock-drop
nlm_traverse_files() pins the current file wi...
|
9.8 Critical | — | 0,71% | 11 Sep 2026 |
|
CVE-2026-89486
In the Linux kernel, the following vulnerability has been resolved:
ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user()
Commit 9e91f8a6c868 ("ipmi:msghandler:...
|
7.8 High | — | 0,12% | 11 Sep 2026 |
|
CVE-2026-89487
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: only skb_tx_error() a packet we are about to drop
queue_userspace_packet() borrows the...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-89488
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: Fix CT limit teardown use-after-free
Packet processing uses CT limit state under RCU, w...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-89489
In the Linux kernel, the following vulnerability has been resolved:
openrisc: fix arbitrary kernel memory access via or1k_atomic syscall
sys_or1k_atomic() (syscall 244...
|
7.8 High | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-89477
In the Linux kernel, the following vulnerability has been resolved:
sctp: fix NULL deref on untransmitted RECONF completion
sctp_process_strreset_outreq(), sctp_process...
|
7.5 High | — | 0,50% | 11 Sep 2026 |
|
CVE-2026-89478
In the Linux kernel, the following vulnerability has been resolved:
sctp: drop a chunk if its transport was removed
sctp_rcv() resolves the transport once per packet an...
|
9.8 Critical | — | 0,51% | 11 Sep 2026 |
|
CVE-2026-89479
In the Linux kernel, the following vulnerability has been resolved:
sctp: stop processing a packet once its association is deleted
sctp_endpoint_bh_rcv() looks the asso...
|
9.8 Critical | — | 0,50% | 11 Sep 2026 |
|
CVE-2026-89480
In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: reject a read that transferred too few bytes
nvme_tcp_recv_data() completes a request once...
|
7.5 High | — | 0,42% | 11 Sep 2026 |
|
CVE-2026-89481
In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: fix host memory disclosure on R2T for a read command
nvme_tcp_handle_r2t() does not check...
|
7.5 High | — | 0,41% | 11 Sep 2026 |
|
CVE-2026-89482
In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone
Commit 25e5cb780e62 ("nvme-tcp...
|
9.8 Critical | — | 0,71% | 11 Sep 2026 |
|
CVE-2026-89483
In the Linux kernel, the following vulnerability has been resolved:
nvme: zero the discard fallback page
nvme_setup_discard() always maps sizeof(struct nvme_dsm_range)...
|
7.5 High | — | 0,57% | 11 Sep 2026 |
|
CVE-2026-89469
In the Linux kernel, the following vulnerability has been resolved:
power: supply: lp8727: fix use-after-free in lp8727_release_irq()
lp8727_isr_func(), the threaded IR...
|
8.4 High | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-89470
In the Linux kernel, the following vulnerability has been resolved:
power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS
Currently the cros_usbpd-charger...
|
8.4 High | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-89471
In the Linux kernel, the following vulnerability has been resolved:
power: supply: cros_usbpd-charger: bound the EC-reported port count
cros_usbpd_charger_probe() reads...
|
8.4 High | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-89472
In the Linux kernel, the following vulnerability has been resolved:
power: supply: charger-manager: register regulators before exposing sysfs
charger_manager_remove() a...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-89476
In the Linux kernel, the following vulnerability has been resolved:
sctp: fix stream->outcnt underflow on duplicate RECONF responses
A cached RECONF chunk may contain m...
|
7.5 High | — | 0,70% | 11 Sep 2026 |
|
CVE-2026-89465
In the Linux kernel, the following vulnerability has been resolved:
power: supply: rt9455: quiesce delayed work before teardown
The threaded IRQ handler can queue pwr_r...
|
8.4 High | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-89466
In the Linux kernel, the following vulnerability has been resolved:
power: supply: qcom_battmgr: terminate the strings from firmware
The qcom_battmgr_sc8280xp_strcpy()...
|
7.7 High | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-89456
In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: Propagate partial completion length across ERP recovery
dasd_default_erp_postaction() cop...
|
7.0 High | — | 0,15% | 11 Sep 2026 |
|
CVE-2026-89459
In the Linux kernel, the following vulnerability has been resolved:
s390/percpu: Fix MVIY_PERCPU() with older binutils
Commit a737737cdb9c ("s390/percpu: Infrastructure...
|
7.0 High | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-89448
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Force requesting ACS when tboot is enabled
Currently the conditions of requesting ACS in...
|
9.3 Critical | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-89450
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field
tegra241_vintf_init_vsid() progra...
|
8.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-89452
In the Linux kernel, the following vulnerability has been resolved:
iommu/msm: Unwind probe state on registration failure
msm_iommu_probe() adds its devm-managed IOMMU...
|
8.4 High | — | 0,20% | 11 Sep 2026 |
|
CVE-2026-89440
In the Linux kernel, the following vulnerability has been resolved:
mmc: via-sdmmc: stop card-detect handling on probe failure
request_irq() registers the SD card-detec...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-89441
In the Linux kernel, the following vulnerability has been resolved:
mmc: via-sdmmc: cancel card-detect work on remove
Disabling the device interrupt and freeing the IRQ...
|
7.8 High | — | 0,18% | 11 Sep 2026 |
|
CVE-2026-89442
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: ISST: Validate socket ID in clos_assoc ioctl
isst_if_clos_assoc() validates the user-s...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-89443
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: ISST: Validate level in perf mask ioctls
isst_if_get_perf_level_mask() and isst_if_get...
|
7.1 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-89445
In the Linux kernel, the following vulnerability has been resolved:
iommufd: Fix UAF in selftest IOPF reporting
IOMMUFD selftest TRIGGER_IOPF borrows an attach handle f...
|
8.8 High | — | 0,18% | 11 Sep 2026 |
|
CVE-2026-89436
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[]
acpi_pcc_retrieve_biosdata() rej...
|
7.8 High | — | 0,18% | 11 Sep 2026 |
|
CVE-2026-89332
amazon kiro ide
Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors...
|
5.5 Medium | — | 0,18% | 11 Sep 2026 |
|
CVE-2026-81913
concretecms concrete cms
Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a single link on the site's own domain that sends...
|
6.1 Medium | — | 0,29% | 11 Sep 2026 |
|
CVE-2026-81915
concretecms concrete cms
Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::submit() dashboard controller loaded and saved the...
|
5.3 Medium | — | 0,29% | 11 Sep 2026 |
|
CVE-2026-81916
concretecms concrete cms
Concrete CMS before 9.5.3 evaluated the authorization check for an Express entry submission against the entity of the posted form rather than the entity identified by the...
|
4.3 Medium | — | 0,27% | 11 Sep 2026 |
|
CVE-2026-81911
concretecms concrete cms
Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The custom_slot save_template endpoint authorizes the request only against t...
|
5.4 Medium | — | 0,24% | 11 Sep 2026 |
|
CVE-2026-81912
concretecms concrete cms
Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery in the Move Multiple Groups feature. The dashboard/users/groups/bulkupdate/confirm() endpoint moved...
|
5.7 Medium | — | 0,19% | 11 Sep 2026 |
|
CVE-2026-81012
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()
hp_get_string_from_buf...
|
8.4 High | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-81015
In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails
amd_pmc_probe() registers the L...
|
7.8 High | — | 0,18% | 11 Sep 2026 |
|
CVE-2026-81016
In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd/pmc: Propagate SMU errors and validate S2D address
amd_stb_s2d_init() discards the...
|
7.7 High | — | 0,19% | 11 Sep 2026 |
|
CVE-2026-81017
In the Linux kernel, the following vulnerability has been resolved:
platform/chrome: sensorhub: Bound the EC-reported sensor number
Each EC FIFO event carries an 8-bit...
|
8.4 High | — | 0,19% | 11 Sep 2026 |
|
CVE-2026-81004
In the Linux kernel, the following vulnerability has been resolved:
ipmi:msghandler: Cancel work cleanly on an error
If an error occurs during startup of an IPMI interf...
|
8.4 High | — | 0,18% | 11 Sep 2026 |
|
CVE-2026-81006
In the Linux kernel, the following vulnerability has been resolved:
ipmi: Remove all sysfs files on registration failure
ipmi_add_smi() creates the nr_users and nr_msgs...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-81007
In the Linux kernel, the following vulnerability has been resolved:
ipmi: ipmb: validate write message length
ipmb_write() read message fields before validating the len...
|
7.1 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-81008
In the Linux kernel, the following vulnerability has been resolved:
interconnect: Fix use after free in icc_get() and of_icc_get_by_index()
In of_icc_get_by_index() and...
|
7.8 High | — | 0,16% | 11 Sep 2026 |