Katalog CVE (hal. 418)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.829 (Critical 36.290 · High 105.026 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 06:50 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 20.851–20.900 dari 262.829 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-89548 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: always drain cache_cleaner before destroying a cache_detail sunrpc_destroy_cache_detail() on...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89549 In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc_pool_for_cpu() svc_set_num_threads() spreads the requested...	7.5 High	—	0,71%	11 Sep 2026
CVE-2026-89550 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: enforce krb5 token minimum length svcauth_gss_unwrap_priv() validates only an u...	9.8 Critical	—	0,46%	11 Sep 2026
CVE-2026-89551 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow xdr_buf_trim() trims `len` bytes from the ta...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-89553 In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non-uvmm path, there coul...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89540 In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp_lock before publishing proc entry create_use_gss_proxy_proc_entry() publishes /pro...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89541 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length checks gss_unwrap_resp_priv() validates the RPCSEC_GSS op...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-89542 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens gss_krb5_unwrap_v2() reads the EC and RRC hea...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-89544 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssx_dec_option_array error path bugs Four coupled defects in the gssx XDR option-array...	7.5 High	—	0,59%	11 Sep 2026
CVE-2026-89545 In the Linux kernel, the following vulnerability has been resolved: sunrpc: defer rq_argp and rq_resp free until after RCU grace period svc_rqst_free() frees rqstp->rq_...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-89546 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: close backchannel before destroying callback service A backchannel receive can complete a re...	9.8 Critical	—	0,55%	11 Sep 2026
CVE-2026-89532 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pcl_for_each_segment for empty chunks When a parsed chunk list contains a chunk whose c...	9.1 Critical	—	0,50%	11 Sep 2026
CVE-2026-89533 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix offset arithmetic in read_chunk_range svc_rdma_read_chunk_range() walks a Read chunk's...	9.8 Critical	—	0,50%	11 Sep 2026
CVE-2026-89534 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails When svc_rdma_listen_handler() handles RD...	8.8 High	—	0,24%	11 Sep 2026
CVE-2026-89535 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id svc_rdma_free() caches rdma->sc_cm_id-...	8.1 High	—	0,54%	11 Sep 2026
CVE-2026-89536 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake callback xs_tls_handshake_sync() gives xs_tls_handsh...	9.8 Critical	—	0,64%	11 Sep 2026
CVE-2026-89537 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 gss_krb5_verify_mic_v2() reads th...	9.1 Critical	—	0,65%	11 Sep 2026
CVE-2026-89538 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gss_krb5_unwrap_v2() sets buf->len to a l...	9.8 Critical	—	0,71%	11 Sep 2026
CVE-2026-89523 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel pending mlo_pm_work If the device is reset, suspended or unregistered wit...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89524 In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6kl_cfg80211_con...	8.1 High	—	0,27%	11 Sep 2026
CVE-2026-89526 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field...	9.8 Critical	—	0,64%	11 Sep 2026
CVE-2026-89528 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths are validated...	7.5 High	—	0,67%	11 Sep 2026
CVE-2026-89530 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject inline replies that overflow the pull-up buffer An RPC-over-RDMA client can request...	9.8 Critical	—	0,46%	11 Sep 2026
CVE-2026-89520 In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's pick_next_task() o...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-89521 In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle pick_task() releasing the rq lock Core scheduling's pick_next_task() breaks when...	7.3 High	—	0,15%	11 Sep 2026
CVE-2026-89522 In the Linux kernel, the following vulnerability has been resolved: media: staging/ipu7: fix async notifier UAF on probe error path isys_register_devices() registers th...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89507 In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_write_cm_event() ctx->file may only be changed under the handler...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89508 In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_set_ib_path() ucma_set_ib_path() calls ucma_event_handler() stra...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89510 In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Cancel reg_work before freeing device on remove c4iw_uld_state_change() queues reg_work...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-89511 In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver...	7.5 High	—	0,71%	11 Sep 2026
CVE-2026-89513 In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Fix PMU event info array size overflow SBI PMU EVENT_GET_INFO stores guest-controlled n...	8.8 High	—	0,17%	11 Sep 2026
CVE-2026-89499 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Stop remote reader update when page swap fails The remote swap_reader_page callback can...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89500 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page Discarding a cached reader page afte...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-89501 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf Because, ring_buffer_subbuf_order_set() ca...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89503 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() ring_buffer_alloc_read_page()...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-89504 In the Linux kernel, the following vulnerability has been resolved: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer...	8.4 High	—	0,14%	11 Sep 2026
CVE-2026-89492 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2_validate_dx_leaf() and ocfs...	9.8 Critical	—	0,64%	11 Sep 2026
CVE-2026-89493 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate rl_used against rl_count in refcount block validator ocfs2_find_refcount_rec_in_rl()...	8.8 High	—	0,65%	11 Sep 2026
CVE-2026-89494 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlm_mig_lockres_handler A node receiving a DLM_MIG_LOCKRES message trusts...	9.8 Critical	—	0,71%	11 Sep 2026
CVE-2026-89495 In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlm_migrate_request_handler Patch series "ocfs2/dlm: bound peer-controlled l...	9.8 Critical	—	0,71%	11 Sep 2026
CVE-2026-89497 In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefs_prepare_cdm_array() sizes e...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89485 In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlm_inspect_file lock-drop nlm_traverse_files() pins the current file wi...	9.8 Critical	—	0,71%	11 Sep 2026
CVE-2026-89486 In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() Commit 9e91f8a6c868 ("ipmi:msghandler:...	7.8 High	—	0,12%	11 Sep 2026
CVE-2026-89487 In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skb_tx_error() a packet we are about to drop queue_userspace_packet() borrows the...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89488 In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-free Packet processing uses CT limit state under RCU, w...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-89489 In the Linux kernel, the following vulnerability has been resolved: openrisc: fix arbitrary kernel memory access via or1k_atomic syscall sys_or1k_atomic() (syscall 244...	7.8 High	—	0,14%	11 Sep 2026
CVE-2026-89477 In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctp_process_strreset_outreq(), sctp_process...	7.5 High	—	0,50%	11 Sep 2026
CVE-2026-89478 In the Linux kernel, the following vulnerability has been resolved: sctp: drop a chunk if its transport was removed sctp_rcv() resolves the transport once per packet an...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-89479 In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctp_endpoint_bh_rcv() looks the asso...	9.8 Critical	—	0,50%	11 Sep 2026
CVE-2026-89480 In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few bytes nvme_tcp_recv_data() completes a request once...	7.5 High	—	0,42%	11 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.