Katalog CVE (hal. 419)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.829 (Critical 36.290 · High 105.026 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 06:50 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 20.901–20.950 dari 262.829 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-89481 In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix host memory disclosure on R2T for a read command nvme_tcp_handle_r2t() does not check...	7.5 High	—	0,41%	11 Sep 2026
CVE-2026-89482 In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone Commit 25e5cb780e62 ("nvme-tcp...	9.8 Critical	—	0,71%	11 Sep 2026
CVE-2026-89483 In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvme_setup_discard() always maps sizeof(struct nvme_dsm_range)...	7.5 High	—	0,57%	11 Sep 2026
CVE-2026-89469 In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8727: fix use-after-free in lp8727_release_irq() lp8727_isr_func(), the threaded IR...	8.4 High	—	0,14%	11 Sep 2026
CVE-2026-89470 In the Linux kernel, the following vulnerability has been resolved: power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS Currently the cros_usbpd-charger...	8.4 High	—	0,14%	11 Sep 2026
CVE-2026-89471 In the Linux kernel, the following vulnerability has been resolved: power: supply: cros_usbpd-charger: bound the EC-reported port count cros_usbpd_charger_probe() reads...	8.4 High	—	0,14%	11 Sep 2026
CVE-2026-89472 In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs charger_manager_remove() a...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-89476 In the Linux kernel, the following vulnerability has been resolved: sctp: fix stream->outcnt underflow on duplicate RECONF responses A cached RECONF chunk may contain m...	7.5 High	—	0,70%	11 Sep 2026
CVE-2026-89465 In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwr_r...	8.4 High	—	0,14%	11 Sep 2026
CVE-2026-89466 In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom_battmgr: terminate the strings from firmware The qcom_battmgr_sc8280xp_strcpy()...	7.7 High	—	0,14%	11 Sep 2026
CVE-2026-89456 In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Propagate partial completion length across ERP recovery dasd_default_erp_postaction() cop...	7.0 High	—	0,15%	11 Sep 2026
CVE-2026-89459 In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIY_PERCPU() with older binutils Commit a737737cdb9c ("s390/percpu: Infrastructure...	7.0 High	—	0,14%	11 Sep 2026
CVE-2026-89448 In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in...	9.3 Critical	—	0,14%	11 Sep 2026
CVE-2026-89450 In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field tegra241_vintf_init_vsid() progra...	8.8 High	—	0,13%	11 Sep 2026
CVE-2026-89452 In the Linux kernel, the following vulnerability has been resolved: iommu/msm: Unwind probe state on registration failure msm_iommu_probe() adds its devm-managed IOMMU...	8.4 High	—	0,20%	11 Sep 2026
CVE-2026-89440 In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure request_irq() registers the SD card-detec...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89441 In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device interrupt and freeing the IRQ...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-89442 In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos_assoc ioctl isst_if_clos_assoc() validates the user-s...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-89443 In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst_if_get_perf_level_mask() and isst_if_get...	7.1 High	—	0,16%	11 Sep 2026
CVE-2026-89445 In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGER_IOPF borrows an attach handle f...	8.8 High	—	0,18%	11 Sep 2026
CVE-2026-89436 In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[] acpi_pcc_retrieve_biosdata() rej...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-89332 amazon kiro ide Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors...	5.5 Medium	—	0,18%	11 Sep 2026
CVE-2026-81913 concretecms concrete cms Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a single link on the site's own domain that sends...	6.1 Medium	—	0,29%	11 Sep 2026
CVE-2026-81915 concretecms concrete cms Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::submit() dashboard controller loaded and saved the...	5.3 Medium	—	0,29%	11 Sep 2026
CVE-2026-81916 concretecms concrete cms Concrete CMS before 9.5.3 evaluated the authorization check for an Express entry submission against the entity of the posted form rather than the entity identified by the...	4.3 Medium	—	0,27%	11 Sep 2026
CVE-2026-81911 concretecms concrete cms Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The custom_slot save_template endpoint authorizes the request only against t...	5.4 Medium	—	0,24%	11 Sep 2026
CVE-2026-81912 concretecms concrete cms Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery in the Move Multiple Groups feature. The dashboard/users/groups/bulkupdate/confirm() endpoint moved...	5.7 Medium	—	0,19%	11 Sep 2026
CVE-2026-81012 In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() hp_get_string_from_buf...	8.4 High	—	0,14%	11 Sep 2026
CVE-2026-81015 In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amd_pmc_probe() registers the L...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-81016 In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amd_stb_s2d_init() discards the...	7.7 High	—	0,19%	11 Sep 2026
CVE-2026-81017 In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported sensor number Each EC FIFO event carries an 8-bit...	8.4 High	—	0,19%	11 Sep 2026
CVE-2026-81004 In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interf...	8.4 High	—	0,18%	11 Sep 2026
CVE-2026-81006 In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmi_add_smi() creates the nr_users and nr_msgs...	7.8 High	—	0,13%	11 Sep 2026
CVE-2026-81007 In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_write() read message fields before validating the len...	7.1 High	—	0,13%	11 Sep 2026
CVE-2026-81008 In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc_get() and of_icc_get_by_index() In of_icc_get_by_index() and...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-81010 In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: honor task_work cancellation io_waitid_cb() may run through the fallback task_work...	7.8 High	—	0,18%	11 Sep 2026
CVE-2026-81011 In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type package parse...	7.1 High	—	0,13%	11 Sep 2026
CVE-2026-81001 In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl_sync() slip_devs[] stores bare net_device pointers and takes no refer...	7.8 High	—	0,16%	11 Sep 2026
CVE-2026-81002 In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdp_convert_zc_to_xdp_frame() clones an XSK packet into an order-0 p...	9.8 Critical	—	0,51%	11 Sep 2026
CVE-2026-81003 In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucv_hs_rcv() by ingress device afiucv_hs_rcv() selects a socket from i...	8.1 High	—	0,31%	11 Sep 2026
CVE-2026-81000 In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosi...	7.8 High	—	0,36%	11 Sep 2026
CVE-2026-80992 In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first op...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-80994 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below ma...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-80995 In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctp_route_lookup() mctp_route_lookup() uses rt->...	7.8 High	—	0,17%	11 Sep 2026
CVE-2026-80997 In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix stalled modem TX queue after runtime resume ipa_start_xmit() unconditionally stops the...	7.5 High	—	0,61%	11 Sep 2026
CVE-2026-80998 In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of packets is handed down to the d...	7.5 High	—	0,49%	11 Sep 2026
CVE-2026-80985 In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry smc_llc_rmt_delete_rkey() and smc_l...	8.2 High	—	0,53%	11 Sep 2026
CVE-2026-80986 In the Linux kernel, the following vulnerability has been resolved: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages On a link whose device has max_recv_sge...	9.8 Critical	—	0,65%	11 Sep 2026
CVE-2026-80987 In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Reject oversized TX buffers ntb_process_tx() handles an oversized buffer by call...	7.5 High	—	0,50%	11 Sep 2026
CVE-2026-80989 In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnet_con...	8.8 High	—	0,34%	11 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.