Katalog CVE (hal. 560)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.391 (Critical 36.349 · High 105.294 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 26 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 27.951–28.000 dari 263.391 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-80550 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Fix out of bounds check on CCW array The routine ccwchain_calc_length() counts the nu...	7.9 High	—	0,18%	26 Agt 2026
CVE-2026-80549 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Move cp cleanup out of not operational The fsm_notoper() routine is called when the d...	8.2 High	—	0,18%	26 Agt 2026
CVE-2026-80548 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Selectively expand io_mutex The io_mutex was defined to serialize the io_regions, but...	8.8 High	—	0,18%	26 Agt 2026
CVE-2026-80547 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Implement a crw lock Unlike the channel_program struct, which covers synchronous I/O...	8.8 High	—	0,18%	26 Agt 2026
CVE-2026-80546 In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow checks The xcrb_msg_to_type6cprb_msgx() function l...	7.8 High	—	0,19%	26 Agt 2026
CVE-2026-80545 In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrb_msg_to_type6_ep11cprb_msgx() func...	7.8 High	—	0,19%	26 Agt 2026
CVE-2026-80544 In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcrypt_msgtype6_send_ep11_cprb...	7.8 High	—	0,18%	26 Agt 2026
CVE-2026-80541 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEM_CREATE domain combinations AMDGPU_GEM_CREATE checked domain bits against AM...	7.8 High	—	0,13%	26 Agt 2026
CVE-2026-80540 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also...	7.8 High	—	0,13%	26 Agt 2026
CVE-2026-80538 In the Linux kernel, the following vulnerability has been resolved: xfs: propagate errors from xfs_rtginode_load xfs_rtginode_ensure() treats every xfs_rtginode_load()...	7.1 High	—	0,17%	26 Agt 2026
CVE-2026-80537 In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfs_rtrefcountbt_compute_maxlevels() s...	7.8 High	—	0,17%	26 Agt 2026
CVE-2026-80536 In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlog_recover_do_reg_buffer() replays each dirty reg...	8.4 High	—	0,14%	26 Agt 2026
CVE-2026-80531 In the Linux kernel, the following vulnerability has been resolved: xfs: avoid UAF on sc->tempip in xrep_tempfile_create LOLLM noticed a potential UAF if the tempfile c...	7.8 High	—	0,13%	26 Agt 2026
CVE-2026-80530 In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN When exchanging two full-file...	7.1 High	—	0,13%	26 Agt 2026
CVE-2026-80528 In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current->journal_info handle_reply() stores a `ceph_mds_request`...	9.8 Critical	—	0,51%	26 Agt 2026
CVE-2026-80527 In the Linux kernel, the following vulnerability has been resolved: ceph: fix hanging __ceph_get_caps() with stale mds_wanted A reader can hang forever in __ceph_get_ca...	7.5 High	—	0,50%	26 Agt 2026
CVE-2026-80526 In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562_volume_control_put() does not do any valida...	7.8 High	—	0,18%	26 Agt 2026
CVE-2026-80523 In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: k3: set hdma clock as critical HDMA clock is responsible for the internal TCM access...	7.1 High	—	0,16%	26 Agt 2026
CVE-2026-80522 In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() Perform rctx->cryptlen calc...	7.8 High	—	0,13%	26 Agt 2026
CVE-2026-80521 In the Linux kernel, the following vulnerability has been resolved: af_unix: Unlink scc_entry in unix_del_edge(). Kyle Zeng reported that GC could free a dead SCC parti...	7.8 High	—	0,18%	26 Agt 2026
CVE-2026-80520 In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpn_crypto_kill_key assumes both crypto slots a...	7.5 High	—	0,61%	26 Agt 2026
CVE-2026-80519 In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-s...	9.8 Critical	—	0,65%	26 Agt 2026
CVE-2026-75062 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 a...	9.2 Critical	—	0,35%	26 Agt 2026
CVE-2026-74753 In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-exec events t...	7.8 High	—	0,13%	26 Agt 2026
CVE-2026-74752 In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIE_ECHO rest...	9.8 Critical	—	0,52%	26 Agt 2026
CVE-2026-74751 In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one wor...	9.4 Critical	—	0,46%	26 Agt 2026
CVE-2026-74750 In the Linux kernel, the following vulnerability has been resolved: ovpn: defer key slot crypto freeing to workqueue Key slots are released through a kref and the exist...	7.5 High	—	0,61%	26 Agt 2026
CVE-2026-74748 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix refcount race between list:set GC and swap __ip_set_put_byindex() resolved the...	7.8 High	—	0,14%	26 Agt 2026
CVE-2026-74747 In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled int...	7.8 High	—	0,18%	26 Agt 2026
CVE-2026-74746 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-dir...	9.8 Critical	—	0,54%	26 Agt 2026
CVE-2026-74745 In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Unregistering IRQ affinity notifiers...	7.5 High	—	0,45%	26 Agt 2026
CVE-2026-74744 In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev ipvlan devices inherit hard_header_...	9.8 Critical	—	0,51%	26 Agt 2026
CVE-2026-74743 In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit needed_headroom and needed_tailroom from lowerdev macvlan devices inherit hard_head...	9.8 Critical	—	0,54%	26 Agt 2026
CVE-2026-74742 In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in veth_poll veth_poll() derives the index of the pe...	7.5 High	—	0,46%	26 Agt 2026
CVE-2026-74741 In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode (such as l...	7.5 High	—	0,61%	26 Agt 2026
CVE-2026-74739 In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: skip hash tables in u32_bind_class() u32_walk() enumerates both struct tc_u_hnod...	7.8 High	—	0,14%	26 Agt 2026
CVE-2026-74737 In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG On the packet reception path,...	9.8 Critical	—	0,55%	26 Agt 2026
CVE-2026-74736 In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: reject dev-bound programs bound to a different device cls_bpf_prog_from_efd() ob...	7.8 High	—	0,14%	26 Agt 2026
CVE-2026-54556 Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, an unauthenticated HTTP/2 peer can cause an out-of-memory denial of service in the Ember ba...	8.2 High	—	0,52%	26 Agt 2026
CVE-2026-54553 Starlette-Admin is a fast, beautiful and extensible administrative interface framework for FastAPI and Starlette applications. Prior to 0.16.1, the list API does not vali...	5.4 Medium	—	0,45%	26 Agt 2026
CVE-2026-54550 IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack() in izpack-installer...	7.4 High	—	0,45%	26 Agt 2026
CVE-2026-54548 kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSH_PRIVATE_KEY or SSH_PRIVATE_KEY_FILE creates ~/.ssh/config when no us...	3.3 Low	—	0,11%	26 Agt 2026
CVE-2026-54523 Kyverno is a policy engine designed for cloud native platform engineering teams. From 1.18.0 until 1.18.2, the NamespacedMutatingPolicy CEL compiler exposes the generator...	9.6 Critical	—	0,47%	26 Agt 2026
CVE-2026-54511 LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue() function in packages/syslog/src/s...	8.6 High	—	0,48%	26 Agt 2026
CVE-2026-13481 zephyrproject zephyr The IEEE 1588 PTP management-message parser in subsys/net/lib/ptp/tlv.c mishandles the PTP_MGMT_TIME management id. In tlv_mgmt_post_recv(), the PTP_MGMT_TIME case casts...	5.4 Medium	—	0,24%	26 Agt 2026
CVE-2026-13480 zephyrproject zephyr The LoRaWAN TS004 Fragmented Data Block Transport handler frag_transport_package_callback() in subsys/lorawan/services/frag_transport.c parses downlink command bytes with...	3.1 Low	—	0,23%	26 Agt 2026
CVE-2026-13479 zephyrproject zephyr The LoRaWAN application-layer clock-synchronization service parses downlinks in clock_sync_package_callback() (subsys/lorawan/services/clock_sync.c). Its command loop onl...	4.3 Medium	—	0,23%	26 Agt 2026
CVE-2026-79902 gimp A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array (VLA) on the st...	5.5 Medium	—	0,27%	26 Agt 2026
CVE-2026-7487 gitlab GitLab has remediated an issue in GitLab EE affecting all versions from 13.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an...	3.5 Low	—	0,32%	26 Agt 2026
CVE-2026-77801 gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions,...	6.5 Medium	—	0,43%	26 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.