Katalog CVE (hal. 601)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.125 (Critical 36.415 · High 105.508 · KEV 1.758 · sejak 2020) · Pembaruan terakhir: 28 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 30.001–30.050 dari 264.125 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-74705 In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP hea...	10.0 Critical	—	0,50%	22 Agt 2026
CVE-2026-74704 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter The sch_cake ACK filter par...	8.2 High	—	0,44%	22 Agt 2026
CVE-2026-74703 In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protecti...	7.1 High	—	0,18%	22 Agt 2026
CVE-2026-74702 In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhost_scsi_setup_vq_cmds() runs from VHOST_SCSI_SE...	8.8 High	—	0,17%	22 Agt 2026
CVE-2026-74701 In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in key_extract() When a packet arrives on an ARPHRD_NO...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74700 In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers Another challenge wi...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74697 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame padding) on t...	8.2 High	—	0,45%	22 Agt 2026
CVE-2026-74696 In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO max_qlen accounting across reuseport migration A listener's TCP_FASTOPEN max_qlen stops...	7.5 High	—	0,49%	22 Agt 2026
CVE-2026-74695 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() Incoming skbs passing thr...	7.5 High	—	0,44%	22 Agt 2026
CVE-2026-74692 In the Linux kernel, the following vulnerability has been resolved: net/smc: fix TOCTOU race between smc_listen_out() and listener close smc_listen_out() reads lsmc->sk...	7.5 High	—	0,49%	22 Agt 2026
CVE-2026-74691 In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnet_tear_down() stops both rings a...	8.8 High	—	0,26%	22 Agt 2026
CVE-2026-74690 In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() A ism interrupt handler can be active in para...	8.4 High	—	0,20%	22 Agt 2026
CVE-2026-74689 In the Linux kernel, the following vulnerability has been resolved: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() vcc_setsockopt() contained an ineffective o...	7.1 High	—	0,14%	22 Agt 2026
CVE-2026-74688 In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctp_make_heartbeat_ack() caches the dest...	9.8 Critical	—	0,50%	22 Agt 2026
CVE-2026-74687 In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent timer rearm during teardown at91_ping() rearms the watchdog timer fr...	7.8 High	—	0,18%	22 Agt 2026
CVE-2026-74684 In the Linux kernel, the following vulnerability has been resolved: net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() The commit 4f61f133f35...	7.1 High	—	0,15%	22 Agt 2026
CVE-2026-74678 In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() When the interface has NETIF_F_SG enabled...	7.5 High	—	0,48%	22 Agt 2026
CVE-2026-74675 In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get kbd_keycode() reads vc->port.tty wi...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74674 In the Linux kernel, the following vulnerability has been resolved: mm: fix incorrect flush address in direct page table reclaim When zap_pte_range reclaims a page tabl...	7.8 High	—	0,17%	22 Agt 2026
CVE-2026-74670 In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disabled calc phase IPVS estimator kthread 0 starts with zeroed chain and...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74669 In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ip_vs_in_icmp() rebases an skb from the o...	9.8 Critical	—	0,51%	22 Agt 2026
CVE-2026-74668 In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_header_len in TX_RING send path tpacket_snd() reads dev->hard_header_len...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74667 In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packet_parse_headers() resets th...	7.8 High	—	0,14%	22 Agt 2026
CVE-2026-74666 In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring reconfiguration packet_set_ring() updates the RX rin...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74665 In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP frag adjustment Generic XDP exposes non-linear skb...	9.1 Critical	—	0,37%	22 Agt 2026
CVE-2026-74663 In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursi...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74662 In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inet_frag_create() arms the fragment queue timer bef...	9.8 Critical	—	0,51%	22 Agt 2026
CVE-2026-74661 In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after-free in beacon worker mac802154_beacon_worker() reads local->beacon_...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74660 In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt_nflog: pin the NFLOG backend nf_log_unregister() runs after the per-net teardown so i...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74656 In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fib_nhc_update_mtu() fib_nhc_update_mtu() walks the nexthop exception ta...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74655 In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing...	8.8 High	—	0,18%	22 Agt 2026
CVE-2026-74652 In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ The RS485 trigger hrtimers are embedded...	7.8 High	—	0,17%	22 Agt 2026
CVE-2026-74651 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() rtw_get_wpa_ie() reads bytes at fixed offsets i...	8.1 High	—	0,27%	22 Agt 2026
CVE-2026-74649 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentica...	8.8 High	—	0,29%	22 Agt 2026
CVE-2026-74648 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: validate monitor transmit frame lengths rtw_cfg80211_monitor_if_xmit_entry() rem...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74647 In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Remove buffer from list prior to unmap operation fastrpc_req_munmap_impl() is called...	7.8 High	—	0,18%	22 Agt 2026
CVE-2026-74646 In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke When an invoke is interrupted b...	7.8 High	—	0,18%	22 Agt 2026
CVE-2026-74641 In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd_us428ctls_vm_fault() turns the faulting page offs...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74640 In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: fix OOB write in fcp_meter_ctl_get() fcp_ioctl_set_meter_map() bounds the user-supplied L...	7.8 High	—	0,17%	22 Agt 2026
CVE-2026-74637 In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix group leader use-after-free after sibling detach perf_group_detach() handles leader a...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74635 In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_cursor() bit_cursor() fetches the glyph under the cur...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74634 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ring_buffer_subbuf_order_...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74632 In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix huge_zero_pfn race Patch series "mm/huge_memory: fix huge_zero_pfn race", v2. T...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74631 In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance in smc_rx_splice smc_rx_splice() passes pages to splic...	8.4 High	—	0,14%	22 Agt 2026
CVE-2026-74630 In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6_dev_get() from resurrecting inet6_dev in6_dev_get() reads dev->ip6_ptr under RCU a...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74629 In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmb_clientid_arr A dibs device interrupt handler can be active after di...	8.8 High	—	0,38%	22 Agt 2026
CVE-2026-74628 In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with mod_timer() an...	9.8 Critical	—	0,50%	22 Agt 2026
CVE-2026-74627 In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov / page mixing We should either have net_iov or page backed frags in a s...	7.8 High	—	0,17%	22 Agt 2026
CVE-2026-74626 In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_netdev: Preserve RX queue depth on allocation failure ntb_netdev_rx_handler() hands the rec...	7.5 High	—	0,50%	22 Agt 2026
CVE-2026-74625 In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: release template ct on non-IP path A bridge nftables ct zone set rule can attach...	7.5 High	—	0,50%	22 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.