Katalog CVE (hal. 570)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.917 (Critical 36.380 · High 105.432 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 27 Okt 2026, 12:31 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 28.451–28.500 dari 263.917 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-80582 In the Linux kernel, the following vulnerability has been resolved: drm/shmem_helper: Check VMA boundaries for PMD mappings In the ->huge_fault handler do not install a...	7.8 High	—	0,17%	26 Agt 2026
CVE-2026-80580 In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer mode_string() uses snprintf() which can return a...	7.8 High	—	0,11%	26 Agt 2026
CVE-2026-80579 In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode before deleting a videomode fb_set_var() can delete a mode from info->mod...	7.8 High	—	0,17%	26 Agt 2026
CVE-2026-80578 In the Linux kernel, the following vulnerability has been resolved: fbdev: core: Fix pointer desynchronization in fb_io_read() In fb_io_read(), if copy_to_user() perfor...	7.3 High	—	0,12%	26 Agt 2026
CVE-2026-80576 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject oversized IBs with per-ring packet limits On GFX rings, amdgpu_cs_p2_ib() passed...	8.8 High	—	0,12%	26 Agt 2026
CVE-2026-80575 In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - validate custom data from user space cs40l50_add() copies the custom data of...	7.8 High	—	0,18%	26 Agt 2026
CVE-2026-80574 In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet Make finger2 (and also fi...	8.4 High	—	0,13%	26 Agt 2026
CVE-2026-80572 In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byd_disconnect() uses timer_dele...	7.8 High	—	0,12%	26 Agt 2026
CVE-2026-80570 In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmi_f54_work(), if an error occurs dur...	7.8 High	—	0,14%	26 Agt 2026
CVE-2026-80569 In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmi_f54_work() reads a dia...	7.8 High	—	0,12%	26 Agt 2026
CVE-2026-80568 In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block s_input when F54 queue is busy Changing the input (diagnostic report t...	7.8 High	—	0,19%	26 Agt 2026
CVE-2026-80565 In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_algs If ops->register_algs() fails, the error path...	7.8 High	—	0,18%	26 Agt 2026
CVE-2026-80561 In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in decode_locker() decode_locker() in cls_lock_client.c contain...	9.8 Critical	—	0,51%	26 Agt 2026
CVE-2026-80560 In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restore_sigcontext() copies the who...	7.8 High	—	0,18%	26 Agt 2026
CVE-2026-80559 In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40_probe(), input_register_device() was...	7.8 High	—	0,18%	26 Agt 2026
CVE-2026-80558 In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from primary_temp A corrupted osdmap received from a Ceph m...	9.8 Critical	—	0,51%	26 Agt 2026
CVE-2026-80557 In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via missing bounds check ceph_start_decoding() validates...	9.8 Critical	—	0,53%	26 Agt 2026
CVE-2026-80556 In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition In atmci_probe, &host->bh_w...	7.8 High	—	0,17%	26 Agt 2026
CVE-2026-80555 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Free all memory if cp_init() fails The routine cp_free() is called to unpin/free any...	7.1 High	—	0,19%	26 Agt 2026
CVE-2026-80554 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Limit the number of channel program segments The processing of channel programs, and...	9.3 Critical	—	0,20%	26 Agt 2026
CVE-2026-80553 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Cancel existing workqueues The initialization of the io_work and crw_work workqueues...	8.8 High	—	0,18%	26 Agt 2026
CVE-2026-80552 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure index for read/write regions are within range The introduction of the capabili...	8.8 High	—	0,18%	26 Agt 2026
CVE-2026-80551 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a...	9.3 Critical	—	0,20%	26 Agt 2026
CVE-2026-80550 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Fix out of bounds check on CCW array The routine ccwchain_calc_length() counts the nu...	7.9 High	—	0,18%	26 Agt 2026
CVE-2026-80549 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Move cp cleanup out of not operational The fsm_notoper() routine is called when the d...	8.2 High	—	0,18%	26 Agt 2026
CVE-2026-80548 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Selectively expand io_mutex The io_mutex was defined to serialize the io_regions, but...	8.8 High	—	0,18%	26 Agt 2026
CVE-2026-80547 In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Implement a crw lock Unlike the channel_program struct, which covers synchronous I/O...	8.8 High	—	0,18%	26 Agt 2026
CVE-2026-80546 In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow checks The xcrb_msg_to_type6cprb_msgx() function l...	7.8 High	—	0,19%	26 Agt 2026
CVE-2026-80545 In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrb_msg_to_type6_ep11cprb_msgx() func...	7.8 High	—	0,19%	26 Agt 2026
CVE-2026-80544 In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcrypt_msgtype6_send_ep11_cprb...	7.8 High	—	0,18%	26 Agt 2026
CVE-2026-80541 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEM_CREATE domain combinations AMDGPU_GEM_CREATE checked domain bits against AM...	7.8 High	—	0,13%	26 Agt 2026
CVE-2026-80540 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also...	7.8 High	—	0,13%	26 Agt 2026
CVE-2026-80538 In the Linux kernel, the following vulnerability has been resolved: xfs: propagate errors from xfs_rtginode_load xfs_rtginode_ensure() treats every xfs_rtginode_load()...	7.1 High	—	0,17%	26 Agt 2026
CVE-2026-80537 In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfs_rtrefcountbt_compute_maxlevels() s...	7.8 High	—	0,17%	26 Agt 2026
CVE-2026-80536 In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlog_recover_do_reg_buffer() replays each dirty reg...	8.4 High	—	0,14%	26 Agt 2026
CVE-2026-80531 In the Linux kernel, the following vulnerability has been resolved: xfs: avoid UAF on sc->tempip in xrep_tempfile_create LOLLM noticed a potential UAF if the tempfile c...	7.8 High	—	0,13%	26 Agt 2026
CVE-2026-80530 In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN When exchanging two full-file...	7.1 High	—	0,13%	26 Agt 2026
CVE-2026-80528 In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current->journal_info handle_reply() stores a `ceph_mds_request`...	9.8 Critical	—	0,51%	26 Agt 2026
CVE-2026-80527 In the Linux kernel, the following vulnerability has been resolved: ceph: fix hanging __ceph_get_caps() with stale mds_wanted A reader can hang forever in __ceph_get_ca...	7.5 High	—	0,50%	26 Agt 2026
CVE-2026-80526 In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562_volume_control_put() does not do any valida...	7.8 High	—	0,18%	26 Agt 2026
CVE-2026-80523 In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: k3: set hdma clock as critical HDMA clock is responsible for the internal TCM access...	7.1 High	—	0,16%	26 Agt 2026
CVE-2026-80522 In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() Perform rctx->cryptlen calc...	7.8 High	—	0,13%	26 Agt 2026
CVE-2026-80521 In the Linux kernel, the following vulnerability has been resolved: af_unix: Unlink scc_entry in unix_del_edge(). Kyle Zeng reported that GC could free a dead SCC parti...	7.8 High	—	0,18%	26 Agt 2026
CVE-2026-80520 In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpn_crypto_kill_key assumes both crypto slots a...	7.5 High	—	0,61%	26 Agt 2026
CVE-2026-80519 In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-s...	9.8 Critical	—	0,65%	26 Agt 2026
CVE-2026-75062 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 a...	9.2 Critical	—	0,35%	26 Agt 2026
CVE-2026-74753 In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-exec events t...	7.8 High	—	0,13%	26 Agt 2026
CVE-2026-74752 In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIE_ECHO rest...	9.8 Critical	—	0,52%	26 Agt 2026
CVE-2026-74751 In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one wor...	9.4 Critical	—	0,46%	26 Agt 2026
CVE-2026-74750 In the Linux kernel, the following vulnerability has been resolved: ovpn: defer key slot crypto freeing to workqueue Key slots are released through a kref and the exist...	7.5 High	—	0,61%	26 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.