Katalog CVE (hal. 545)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.383 (Critical 36.349 · High 105.290 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 26 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 27.201–27.250 dari 263.383 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-80724 In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclock_miscdev_mmap() rejects writa...	8.8 High	—	0,18%	28 Agt 2026
CVE-2026-80723 In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic regions are defined On boot, fdt_scan_reserved_m...	8.4 High	—	0,13%	28 Agt 2026
CVE-2026-80722 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211_process_rx_twt_action()...	8.8 High	—	0,24%	28 Agt 2026
CVE-2026-80721 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in iso_conn After iso_conn_del(), ISO sockets sho...	8.8 High	—	0,38%	28 Agt 2026
CVE-2026-80720 In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iomap_split_ioend can split bios that already co...	7.5 High	—	0,61%	28 Agt 2026
CVE-2026-80718 In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() In pcpu_create_chunk(), nr_p...	7.8 High	—	0,18%	28 Agt 2026
CVE-2026-80717 In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter cont...	7.5 High	—	0,33%	28 Agt 2026
CVE-2026-80716 In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink snd_pcm_drain() on a linked stream parks an on-stack...	7.8 High	—	0,12%	28 Agt 2026
CVE-2026-80714 In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before thei...	9.8 Critical	—	0,48%	28 Agt 2026
CVE-2026-80713 In the Linux kernel, the following vulnerability has been resolved: io_uring: preserve task restrictions across exec Per-task restrictions apply to all rings created by...	8.4 High	—	0,16%	28 Agt 2026
CVE-2026-80712 In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SET_FEATURE qcom_spi_send_cmdaddr() pr...	8.4 High	—	0,19%	28 Agt 2026
CVE-2026-80710 In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmt_buffer_size in dasd_eckd_check_device_format() is...	7.8 High	—	0,18%	28 Agt 2026
CVE-2026-80709 In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check...	7.8 High	—	0,18%	28 Agt 2026
CVE-2026-80707 In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Zero the allocated buffe...	7.5 High	—	0,33%	28 Agt 2026
CVE-2026-80706 In the Linux kernel, the following vulnerability has been resolved: can: softing: fw_parse(): validate firmware record spans fw_parse() reads a fixed record header, a f...	7.8 High	—	0,12%	28 Agt 2026
CVE-2026-80702 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size Two sites in vmwgfx_resource.c assign...	7.8 High	—	0,13%	28 Agt 2026
CVE-2026-80700 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmw_external_bo_copy() trusts cal...	7.8 High	—	0,13%	28 Agt 2026
CVE-2026-80696 In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Fix reading the minimum alarm voltage Coverity reports an out-of-bounds access when...	7.8 High	—	0,18%	28 Agt 2026
CVE-2026-80694 In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller mtk_handle_irq_rx expec...	9.8 Critical	—	0,46%	28 Agt 2026
CVE-2026-80693 In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to the allocated array idpf_get_reg_intr_vecs() fills the...	9.3 Critical	—	0,20%	28 Agt 2026
CVE-2026-80692 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks There is theoretical UAF if th...	8.8 High	—	0,40%	28 Agt 2026
CVE-2026-80691 In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE In the iblock_execute_pr_out()...	7.5 High	—	0,44%	28 Agt 2026
CVE-2026-80685 In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read __page_2 for order-1 folios in snapshot_page() snapshot_page() currently reads _...	7.1 High	—	0,16%	28 Agt 2026
CVE-2026-80684 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL...	9.3 Critical	—	0,20%	28 Agt 2026
CVE-2026-80683 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: give the socket its own sco_conn reference sco_conn_del() drops a reference it does...	8.8 High	—	0,37%	28 Agt 2026
CVE-2026-80682 In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmap_start_pfn RISC-V computes vmemmap_start_pfn by rounding...	7.8 High	—	0,18%	28 Agt 2026
CVE-2026-80681 In the Linux kernel, the following vulnerability has been resolved: vxlan: re-fetch eth header after route_shortcircuit() Before route_shortcircuit(), the eth header po...	9.8 Critical	—	0,50%	28 Agt 2026
CVE-2026-80680 In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amd_mp2_register_cb() stores the platform I...	7.8 High	—	0,18%	28 Agt 2026
CVE-2026-80678 In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling In i2c_imx_reg_slave(), the slave pointer w...	8.4 High	—	0,14%	28 Agt 2026
CVE-2026-80677 In the Linux kernel, the following vulnerability has been resolved: driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() dev_has_sync_state() reads dev-...	7.8 High	—	0,18%	28 Agt 2026
CVE-2026-80675 In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map->sha against...	7.1 High	—	0,17%	28 Agt 2026
CVE-2026-80674 In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident attribute lists and harden the validator A base inode's $ATTRIBUTE_LIST is s...	9.8 Critical	—	0,55%	28 Agt 2026
CVE-2026-80673 In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() When resolving an attri...	9.8 Critical	—	0,55%	28 Agt 2026
CVE-2026-80672 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check ntfs_check_restart_area() validates that the $...	8.8 High	—	0,17%	28 Agt 2026
CVE-2026-80671 In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix register_pid() overflow, strcpy, and BUG_ON register_pid() has several issues when p...	9.3 Critical	—	0,16%	28 Agt 2026
CVE-2026-80670 In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perf_env__get_cpu_topology() in machine__resolve() machine__resolve() accesses env->...	9.1 Critical	—	0,67%	28 Agt 2026
CVE-2026-80668 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use conntrack GC to reap expectations This patch replaces the timer...	9.8 Critical	—	0,67%	28 Agt 2026
CVE-2026-80665 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN kvm_handle_vncr_abort() assumes...	7.1 High	—	0,21%	28 Agt 2026
CVE-2026-80664 In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nat: reject unsupported target families xt_nat SNAT and DNAT target handlers assume IP...	7.3 High	—	0,13%	28 Agt 2026
CVE-2026-80663 In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobberin...	7.1 High	—	0,13%	28 Agt 2026
CVE-2026-80662 In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Stru...	7.1 High	—	0,17%	28 Agt 2026
CVE-2026-80661 In the Linux kernel, the following vulnerability has been resolved: ufs: core: tracing: Do not dereference pointers in TP_printk() The trace events in drivers/ufs/core/...	7.8 High	—	0,17%	28 Agt 2026
CVE-2026-80656 In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in [1] with a co...	7.8 High	—	0,17%	28 Agt 2026
CVE-2026-80653 In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Add slave_destroy interface for v3 hw WARNING is triggered when executing link reset...	8.4 High	—	0,20%	28 Agt 2026
CVE-2026-80649 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_get() does not validate the dom...	7.8 High	—	0,18%	28 Agt 2026
CVE-2026-80646 In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6_dev_stats_get() dev_get_by_index_rcu() could return...	7.5 High	—	0,72%	28 Agt 2026
CVE-2026-80645 In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() With a list_for_each() loop, if we don'...	8.1 High	—	0,40%	28 Agt 2026
CVE-2026-80638 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent [BUG] Unlinking a refcounted file who...	8.8 High	—	0,51%	28 Agt 2026
CVE-2026-80637 In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use get_unaligned_be32() an...	7.5 High	—	0,63%	28 Agt 2026
CVE-2026-80635 In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from short trigger BA firmware response The firmware response length is...	8.8 High	—	0,40%	28 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.