Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-81010
In the Linux kernel, the following vulnerability has been resolved:
io_uring/waitid: honor task_work cancellation
io_waitid_cb() may run through the fallback task_work...
|
7.8 High | — | 0,18% | 11 Sep 2026 |
|
CVE-2026-81011
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: hp-bioscfg: pass validated element count to package parsers
The per-type package parse...
|
7.1 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-81001
In the Linux kernel, the following vulnerability has been resolved:
slip: fix use-after-free in sl_sync()
slip_devs[] stores bare net_device pointers and takes no refer...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-81002
In the Linux kernel, the following vulnerability has been resolved:
xdp: fix zero-copy frame layout
xdp_convert_zc_to_xdp_frame() clones an XSK packet into an order-0 p...
|
9.8 Critical | — | 0,51% | 11 Sep 2026 |
|
CVE-2026-81003
In the Linux kernel, the following vulnerability has been resolved:
net/iucv: filter frames in afiucv_hs_rcv() by ingress device
afiucv_hs_rcv() selects a socket from i...
|
8.1 High | — | 0,31% | 11 Sep 2026 |
|
CVE-2026-81000
In the Linux kernel, the following vulnerability has been resolved:
net: tun: bound receive headroom
tun_get_user() uses tun->align both as skb headroom and when choosi...
|
7.8 High | — | 0,36% | 11 Sep 2026 |
|
CVE-2026-80992
In the Linux kernel, the following vulnerability has been resolved:
net: ravb: avoid dereferencing an invalid PTP clock
The PTP clock is unavailable before the first op...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80994
In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: fix flow mask use-after-free on flow deletion
The commit in the Fixes tag below ma...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80995
In the Linux kernel, the following vulnerability has been resolved:
net: mctp: hold a reference to the route device in mctp_route_lookup()
mctp_route_lookup() uses rt->...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80997
In the Linux kernel, the following vulnerability has been resolved:
net: ipa: fix stalled modem TX queue after runtime resume
ipa_start_xmit() unconditionally stops the...
|
7.5 High | — | 0,61% | 11 Sep 2026 |
|
CVE-2026-80998
In the Linux kernel, the following vulnerability has been resolved:
net: bnxt: ring the doorbell when SW USO exits early
When a burst of packets is handed down to the d...
|
7.5 High | — | 0,49% | 11 Sep 2026 |
|
CVE-2026-80985
In the Linux kernel, the following vulnerability has been resolved:
net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry
smc_llc_rmt_delete_rkey() and smc_l...
|
8.2 High | — | 0,53% | 11 Sep 2026 |
|
CVE-2026-80986
In the Linux kernel, the following vulnerability has been resolved:
net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages
On a link whose device has max_recv_sge...
|
9.8 Critical | — | 0,65% | 11 Sep 2026 |
|
CVE-2026-80987
In the Linux kernel, the following vulnerability has been resolved:
NTB: ntb_transport: Reject oversized TX buffers
ntb_process_tx() handles an oversized buffer by call...
|
7.5 High | — | 0,50% | 11 Sep 2026 |
|
CVE-2026-80989
In the Linux kernel, the following vulnerability has been resolved:
net: thunderbolt: Mark the connection down when bringing it up fails
Every failure path in tbnet_con...
|
8.8 High | — | 0,34% | 11 Sep 2026 |
|
CVE-2026-80991
In the Linux kernel, the following vulnerability has been resolved:
net: ravb: serialize PTP clock teardown
ravb_ptp_interrupt() can race with ravb_ptp_stop() and pass...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80977
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: don't touch shared zerocopy state in skb_tx_error()
skb_tx_error() completes the zeroco...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80978
In the Linux kernel, the following vulnerability has been resolved:
net: cap advertised IP tunnel headroom
IP tunnel devices derive their advertised needed_headroom fro...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80979
In the Linux kernel, the following vulnerability has been resolved:
net/smc: unregister the connection before draining the rx tasklet
smc_conn_free() calls smc_ism_unse...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80980
In the Linux kernel, the following vulnerability has been resolved:
net/smc: stop killed, freed and out_of_sync sharing a byte
The three connection state flags are sing...
|
9.8 Critical | — | 0,64% | 11 Sep 2026 |
|
CVE-2026-80981
In the Linux kernel, the following vulnerability has been resolved:
net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()
smc_llc_srv_add_link() keeps...
|
9.8 Critical | — | 0,63% | 11 Sep 2026 |
|
CVE-2026-80982
In the Linux kernel, the following vulnerability has been resolved:
net/smc: fix use-after-free in smc_rx_pipe_buf_release()
smc_rx_splice() hands RMB pages to a pipe a...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80971
In the Linux kernel, the following vulnerability has been resolved:
ALSA: bcd2000: clear the URB pointers on disconnect
bcd2000_free_usb_related_resources() frees both...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80975
In the Linux kernel, the following vulnerability has been resolved:
mfd: qnap-mcu: keep the reply buffer alive past a command timeout
qnap_mcu_exec() publishes an on-st...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80976
In the Linux kernel, the following vulnerability has been resolved:
seg6: reset IP6CB after IPv6 decapsulation
decap_and_validate() pulls the outer SRv6 headers and mak...
|
9.8 Critical | — | 0,71% | 11 Sep 2026 |
|
CVE-2026-80962
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: validate geometry fields from on-disk cache_info
cache_segs_init() iterates cache_info->n...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80967
In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
pcxhr_probe() requests pcxhr_threaded...
|
8.4 High | — | 0,19% | 11 Sep 2026 |
|
CVE-2026-80953
In the Linux kernel, the following vulnerability has been resolved:
i3c: master: adi: initialize the lock before enabling interrupts
adi_i3c_master_probe() requests the...
|
8.4 High | — | 0,19% | 11 Sep 2026 |
|
CVE-2026-80954
In the Linux kernel, the following vulnerability has been resolved:
i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()
i3c_device_get_su...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80955
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: fix use-after-free and invalid seg operations in kset_replay()
In kset_replay, when key->...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80958
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: clamp the tail kset read to the segment data region
The tail-kset read in cache_replay(),...
|
7.1 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80959
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: bound the persisted tail-position offset
cache_pos_decode() takes the persisted key_tail...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80961
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: validate kset key_num and intra-segment bounds
Two more fields decoded from the cache dev...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80945
In the Linux kernel, the following vulnerability has been resolved:
crypto: iaa - unmap dst before software fallback on decompress
On a hardware analytics error, decomp...
|
9.1 Critical | — | 0,50% | 11 Sep 2026 |
|
CVE-2026-80947
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop
rtl8xxxu arms rx_urb_wq from the RX comple...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80950
In the Linux kernel, the following vulnerability has been resolved:
i3c: renesas: Check that the transfer is valid before accessing it
The Renesas I3C driver uses an as...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80952
In the Linux kernel, the following vulnerability has been resolved:
i3c: master: Fix info leak and UAF in device unregister path
i3c_master_unregister_i3c_devs() clears...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80943
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids
rtl92du_tx_fill_desc() uses ieee80211_g...
|
7.6 High | — | 0,24% | 11 Sep 2026 |
|
CVE-2026-80944
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: Detach sync cmd buffer on interrupted wait
mwifiex synchronous commands keep the call...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80932
In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: flush works in dependency order
virtio_vsock_remove() stops the virtqueues and then fl...
|
8.4 High | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-80933
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: validate default EEPROM firmware size
The default EEPROM firmware is parsed and...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80935
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy
mt7996_mcu_get_eeprom() de...
|
8.8 High | — | 0,40% | 11 Sep 2026 |
|
CVE-2026-80936
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: cancel mlo_pm_work on stop
mt7925 queues mlo_pm_work with a 5 second delay durin...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80937
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy
mt7915_mcu_get_eeprom() co...
|
8.8 High | — | 0,40% | 11 Sep 2026 |
|
CVE-2026-80926
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in oplock break notification
smb2_oplock_break_noti() reads opinfo->conn w...
|
9.8 Critical | — | 0,44% | 11 Sep 2026 |
|
CVE-2026-80928
In the Linux kernel, the following vulnerability has been resolved:
smack: fix cred UAF in smack_file_send_sigiotask()
When inspecting the credentials of another task,...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80929
In the Linux kernel, the following vulnerability has been resolved:
sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]
cad_pid is global, and kill...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80931
In the Linux kernel, the following vulnerability has been resolved:
w1: ds28e17: reject an oversize length on an I2C block read
w1_f19_i2c_master_transfer() is the mast...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-78546
Out-of-bounds read vulnerability in Citirx Workspace app for Windows.
This issue affects Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LT...
|
4.8 Medium | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-78547
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.
This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), b...
|
4.4 Medium | — | 0,15% | 11 Sep 2026 |