Katalog CVE (hal. 416)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.829 (Critical 36.290 · High 105.026 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 06:50 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 20.751–20.800 dari 262.829 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-89687 In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file ->atomic_open is permitted to ret...	7.5 High	—	0,49%	11 Sep 2026
CVE-2026-89688 In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry In nfs4_preprocess_seqid_op() t...	9.8 Critical	—	0,74%	11 Sep 2026
CVE-2026-89689 In the Linux kernel, the following vulnerability has been resolved: nfsd: don't free session slots that are still in use nfsd4_sequence() can free the very slot it is c...	9.8 Critical	—	0,61%	11 Sep 2026
CVE-2026-89674 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget The XDR buffer size calculation in nfs...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-89675 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and shutdown An async copy could be freed or used after free whil...	9.8 Critical	—	0,44%	11 Sep 2026
CVE-2026-89676 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY For an async COPY, nfsd4_copy() called nfs4...	9.8 Critical	—	0,46%	11 Sep 2026
CVE-2026-89677 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() dentry_create() can hypothetica...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89678 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix partial-write detection in nfsd_direct_write nfsd_direct_write() walks a list of write seg...	7.5 High	—	0,38%	11 Sep 2026
CVE-2026-89679 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs When a SETATTR request include...	7.5 High	—	0,72%	11 Sep 2026
CVE-2026-89680 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup failure When nfsd4_setup_inter_ssc() fails, nfsd...	7.5 High	—	0,65%	11 Sep 2026
CVE-2026-89681 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORK_STRUCT_PENDING be...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89667 In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and...	8.1 High	—	0,54%	11 Sep 2026
CVE-2026-89668 In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() nfsd_debugfs_init() runs befo...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-89669 In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4_copy_notify() finished initializing...	9.8 Critical	—	0,69%	11 Sep 2026
CVE-2026-89670 In the Linux kernel, the following vulnerability has been resolved: nfsd: hold rcu across localio cmpxchg retry nfsd_file objects are freed via call_rcu (filecache.c:29...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89671 In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp->mask nfsd3_proc_setacl() calls set_posix_acl() unconditionally for b...	9.1 Critical	—	0,50%	11 Sep 2026
CVE-2026-89672 In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp->mask The NFSACL v2 SETACL path shares the decoder convention used by...	9.1 Critical	—	0,52%	11 Sep 2026
CVE-2026-89658 In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup nfs40_clean_admin_revoked()...	9.8 Critical	—	0,62%	11 Sep 2026
CVE-2026-89659 In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during delegation revoke A delegation stateid holds only a bare...	9.8 Critical	—	0,44%	11 Sep 2026
CVE-2026-89660 In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointe...	9.8 Critical	—	0,62%	11 Sep 2026
CVE-2026-89662 In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown __destroy_client() releases a client'...	9.8 Critical	—	0,69%	11 Sep 2026
CVE-2026-89663 In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify stateids live in the s...	8.8 High	—	0,46%	11 Sep 2026
CVE-2026-89664 In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via op_release nfsd4_decode_createhow4() calls nfsd4_decode_fa...	7.5 High	—	0,49%	11 Sep 2026
CVE-2026-89665 In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire...	8.2 High	—	0,62%	11 Sep 2026
CVE-2026-89650 In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_export_targets array for mds info v2/v3 ceph_mdsmap_decode() in fs/ceph/mdsmap.c rea...	9.1 Critical	—	0,50%	11 Sep 2026
CVE-2026-89651 In the Linux kernel, the following vulnerability has been resolved: ceph: bound MDSCapAuth path and fs_name decode in handle_session() handle_session() decodes the MDSC...	9.8 Critical	—	0,64%	11 Sep 2026
CVE-2026-89652 In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get_name ceph_get_name() copies the MDS-supplied...	9.8 Critical	—	0,46%	11 Sep 2026
CVE-2026-89653 In the Linux kernel, the following vulnerability has been resolved: ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode MDSMap export_targets entries are...	9.8 Critical	—	0,50%	11 Sep 2026
CVE-2026-89654 In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on session freed during unlock check_new_map() iterates mdsc->sessi...	9.8 Critical	—	0,67%	11 Sep 2026
CVE-2026-89655 In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock list_for_each_entry() iterat...	9.8 Critical	—	0,71%	11 Sep 2026
CVE-2026-89656 In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crush_decode() stores bucket data by array slot, a...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-89657 In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osd_client.c:osd_sparse_read() vali...	7.5 High	—	0,61%	11 Sep 2026
CVE-2026-89643 In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove audit_del_rule() is used for both ne...	9.8 Critical	—	0,71%	11 Sep 2026
CVE-2026-89646 In the Linux kernel, the following vulnerability has been resolved: ceph: fix leaked inode reference on writeback abort at umount ceph_dirty_folio() takes a wrbuffer cl...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89647 In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph_trim_dentries() if no progress possible ceph_cap_reclaim_work() re-queues i...	7.5 High	—	0,62%	11 Sep 2026
CVE-2026-89648 In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph_parse_deleg_inos() ceph_parse_deleg_inos() decodes interval...	7.5 High	—	0,63%	11 Sep 2026
CVE-2026-89649 In the Linux kernel, the following vulnerability has been resolved: ceph: bound xattr value length in __build_xattrs() __build_xattrs() decodes the MDS-supplied xattr b...	9.1 Critical	—	0,68%	11 Sep 2026
CVE-2026-89634 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN() overflow in symlink_data() error context loop The check added by commit 7d9...	9.1 Critical	—	0,69%	11 Sep 2026
CVE-2026-89635 In the Linux kernel, the following vulnerability has been resolved: ksmbd: only rebind the reopened file's own oplock on durable reconnect ksmbd_reopen_durable_fd() wal...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89636 In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce->tgthint in free_tgts() When free_tgts() frees all structures in ce->tlist, ce...	9.8 Critical	—	0,66%	11 Sep 2026
CVE-2026-89637 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 When a valid...	9.8 Critical	—	0,58%	11 Sep 2026
CVE-2026-89638 In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89639 In the Linux kernel, the following vulnerability has been resolved: cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC cifs_do_truncate() is invoked fr...	7.1 High	—	0,17%	11 Sep 2026
CVE-2026-89640 In the Linux kernel, the following vulnerability has been resolved: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 With len == 0 (clone to EOF), th...	7.1 High	—	0,13%	11 Sep 2026
CVE-2026-89641 In the Linux kernel, the following vulnerability has been resolved: cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() When the else branch of cifs_file_...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89626 In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup on failure hid_sensor_custom_add_attributes() cre...	8.8 High	—	0,35%	11 Sep 2026
CVE-2026-89630 In the Linux kernel, the following vulnerability has been resolved: smb: client: restore the data_offset bound in is_valid_oplock_break() Commit 83bfbd0bb902 ("cifs: Re...	9.1 Critical	—	0,54%	11 Sep 2026
CVE-2026-89631 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect response whose byte count is too small CIFSTCon() bounds its strn...	9.1 Critical	—	0,46%	11 Sep 2026
CVE-2026-89632 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() reparse_buf_ptr() reads...	8.2 High	—	0,55%	11 Sep 2026
CVE-2026-89633 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() coalesce_t2() computes...	9.8 Critical	—	0,49%	11 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.