Katalog CVE (hal. 417)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.829 (Critical 36.290 · High 105.026 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 06:50 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 20.801–20.850 dari 262.829 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-89619 In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer quickspi_hid_raw_...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89620 In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: validate report size before copy write_cmd_to_txdma() builds an...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89622 In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcp_i2c_smbus_read() stores the caller-...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-89624 In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universal_pidff_probe() starts...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89610 In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the start...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89611 In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute offsets ntfs_attr_update_meta() shifts the attribute name when...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89612 In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMirr locat...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89613 In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if it has inco...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89614 In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the free-cluster bitmap scan to the volume vol->lcn_empty_bits_per_page is sized from vo...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89615 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound page_lcns[] index by the log record The copy_lcns loop and the redo shorten loop ind...	8.4 High	—	0,15%	11 Sep 2026
CVE-2026-89616 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame() ni_read_frame() decompresses a...	7.5 High	—	0,42%	11 Sep 2026
CVE-2026-89617 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log replay Each DIR_PAGE_ENTRY ends in a page_lcns[] array wh...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89602 In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing z_erofs_gbuf_nrpages is advanced only af...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-89605 In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_message_locked() moves a message con...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89606 In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfs_parse_tag_70_packet() subtracts fixed metadata fi...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89607 In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet parse_tag_3_packet() set encrypt...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89608 In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfs_parse_packet_set() receives a pointer into...	7.1 High	—	0,16%	11 Sep 2026
CVE-2026-89609 In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfs_exorcise_daemon() drops queued...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-89594 In the Linux kernel, the following vulnerability has been resolved: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89596 In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nv_suspend() and nv_resume() wa...	7.1 High	—	0,18%	11 Sep 2026
CVE-2026-89597 In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafb_init() registers the v86d conn...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89599 In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicm_probe() registers the...	8.4 High	—	0,14%	11 Sep 2026
CVE-2026-89600 In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotify_pre_content() builds its file_range on the...	7.8 High	—	0,12%	11 Sep 2026
CVE-2026-89601 In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC inodes ext2_setsize() and ext2_xattr_set2() had a construct...	8.8 High	—	0,60%	11 Sep 2026
CVE-2026-89586 In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes ata_scsi_write_same_xlat() tr...	8.2 High	—	0,62%	11 Sep 2026
CVE-2026-89587 In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: fix stack buffer overflow in query_capability() query_capability() copies four ACP...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89588 In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In ghes_handle_arm_hw_error(), afte...	8.4 High	—	0,19%	11 Sep 2026
CVE-2026-89593 In the Linux kernel, the following vulnerability has been resolved: hugetlb: only adjust reservation during unmapping if mapcount is 0 Since df7a6d1f6405, __unmap_hugep...	7.1 High	—	0,13%	11 Sep 2026
CVE-2026-89579 In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloom_map_alloc() has two 32-bit-spec...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89580 In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_perf_callchain() returns a per-CPU perf_callchain_ent...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89581 In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU ad...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89583 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eir_get_service_data() eir_get_service_data() walks the advertising...	8.1 High	—	0,27%	11 Sep 2026
CVE-2026-89584 In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check t...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89585 In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIG_CHARLCD_BL_FLASH, cha...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89570 In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE not...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89571 In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the input buffer fwctl_cmd_rpc() copies cmd->in_len byt...	7.1 High	—	0,16%	11 Sep 2026
CVE-2026-89573 In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's array_block_check() can only co...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89574 In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read array_block_check() validates blocknr and csum and no...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89562 In the Linux kernel, the following vulnerability has been resolved: ip6_gre: fix hardware header length for NBMA tunnels ip6gre_tnl_link_config_route() accumulates the...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89563 In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() ip6_tnl_xmit() may need to expand headroom before i...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89564 In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forwarding IPv4 and IPv6 input preserve an skb->sk assoc...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89569 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: serialize security confirmation handling rfcomm_security_cfm() looks up a session...	8.8 High	—	0,34%	11 Sep 2026
CVE-2026-89554 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction mptcp_token_join_cookie_init_s...	8.2 High	—	0,60%	11 Sep 2026
CVE-2026-89555 In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull() mpls_select_multipath() calls mpls_multipath_hash() to cho...	9.8 Critical	—	0,69%	11 Sep 2026
CVE-2026-89557 In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb->bblog_shift in super_1_load() In super_1_load(), sb->bblog_shift is an...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89558 In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix still_degraded being inverted in raid10_sync_request() Commit fe6a19d40ceb ("md/md-bi...	9.8 Critical	—	0,64%	11 Sep 2026
CVE-2026-89559 In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() The on-media namespace index fie...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89560 In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation Whiteout objects are used in the...	8.4 High	—	0,13%	11 Sep 2026
CVE-2026-89561 In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() ipv6_rpl_srh_rcv() dereferences idev f...	7.5 High	—	0,44%	11 Sep 2026
CVE-2026-89547 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation __svc_create() initializes three per-pool percpu_co...	8.1 High	—	0,56%	11 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.