Katalog CVE (hal. 695)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.359 (Critical 36.559 · High 106.016 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 34.701–34.750 dari 265.359 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-74548 In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the per-CPU txrx_stats before unregi...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74545 In the Linux kernel, the following vulnerability has been resolved: rtase: fix double free of multi-frag skb on DMA map failure In rtase_start_xmit(), when the head buf...	9.8 Critical	—	0,67%	15 Agt 2026
CVE-2026-74544 In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds u32_change() copies the user-pr...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74541 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: clear iso_data always when detaching conn from hcon When setting conn->hcon = NULL,...	8.8 High	—	0,25%	15 Agt 2026
CVE-2026-74540 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp l2cap_le_connect_rsp() obtains a channel via __l2c...	8.8 High	—	0,26%	15 Agt 2026
CVE-2026-74539 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_sock_getname Accessing iso_pi(sk)->conn requires lock_sock, which is...	8.0 High	—	0,39%	15 Agt 2026
CVE-2026-74538 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_connect_ind Accessing iso_pi(sk)->conn requires lock_sock, which is n...	8.8 High	—	0,24%	15 Agt 2026
CVE-2026-74537 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_ready sk deref in iso_conn_ready must be done either un...	8.8 High	—	0,25%	15 Agt 2026
CVE-2026-74535 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout iso_sock_timeout() takes lock_sock, so sync disa...	8.8 High	—	0,24%	15 Agt 2026
CVE-2026-74534 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix refcounting of iso_conn iso_conn_del() and iso_chan_del() have a race that resul...	8.8 High	—	0,24%	15 Agt 2026
CVE-2026-74533 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero hci_conn::iso_data is accessed and modifie...	8.8 High	—	0,24%	15 Agt 2026
CVE-2026-74531 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: hold conn reference in abort_conn_sync() There is theoretical UAF if the conn i...	8.8 High	—	0,25%	15 Agt 2026
CVE-2026-74530 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback There is theoretical UAF if the co...	8.8 High	—	0,38%	15 Agt 2026
CVE-2026-74529 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback There is theoretical UAF if the con...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74528 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_past_sync() callback Avoids giving freed pointers to hci_conn_...	8.0 High	—	0,36%	15 Agt 2026
CVE-2026-74527 In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that share a CGX L...	8.8 High	—	0,18%	15 Agt 2026
CVE-2026-74523 In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports outside qede_lock in the recovery path A TX timeout on a qede NIC that h...	7.5 High	—	0,50%	15 Agt 2026
CVE-2026-74522 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __close_file_table_ids() A ksmbd_file can remain alive after logical cl...	8.8 High	—	0,63%	15 Agt 2026
CVE-2026-74521 In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp() to compare ClientGUIDs ClientGUID is a fixed-size binary value and can contain e...	9.1 Critical	—	0,41%	15 Agt 2026
CVE-2026-74520 In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF group ownership UAF iopf_group_alloc() links each last-page IOPF group into...	8.8 High	—	0,18%	15 Agt 2026
CVE-2026-74519 In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized dev_name on error path dt_remember_or_free_map() dupli...	7.8 High	—	0,15%	15 Agt 2026
CVE-2026-74518 In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix list corruption in allocate_file_region_entries() allocate_file_region_entries() top...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74517 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Cancel (and flush) the I/O AP...	9.3 Critical	—	0,14%	15 Agt 2026
CVE-2026-74516 In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC...	8.2 High	—	0,14%	15 Agt 2026
CVE-2026-74515 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled The MPCIFC instruction doesn'...	8.8 High	—	0,13%	15 Agt 2026
CVE-2026-74513 In the Linux kernel, the following vulnerability has been resolved: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister dibs_lo_attach_dmb(), dibs...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74512 In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in audit_del_rule() `audit_del_rule()` destroys `e->rule.exe` vi...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74510 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix UAF in pair command cancellation The pairing completion and authentication fail...	7.8 High	—	0,14%	15 Agt 2026
CVE-2026-74509 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix advertising data UAFs hci_find_adv_instance() returns an adv_info pointer t...	8.8 High	—	0,25%	15 Agt 2026
CVE-2026-74508 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: reject frames without a transaction header hidp_recv_ctrl_frame() and hidp_recv_int...	8.8 High	—	0,26%	15 Agt 2026
CVE-2026-74507 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: validate numbered report payloads When hidp_get_raw_report() waits for a numbered r...	7.1 High	—	0,24%	15 Agt 2026
CVE-2026-74506 In the Linux kernel, the following vulnerability has been resolved: afs: Fix UAF when sending a message In afs_make_call(), there's a race with async call reception and...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74503 In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes snd_timer_close_locked() marks an...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74497 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode snd_usb_handle_sync_urb() scales receive...	8.4 High	—	0,14%	15 Agt 2026
CVE-2026-74496 In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in fou_create() fou_create() publishes struct fou through sk_user_data befor...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74495 In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the dri...	9.8 Critical	—	0,51%	15 Agt 2026
CVE-2026-74493 In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination __smc_lgr_terminate() drops conns_l...	9.8 Critical	—	0,50%	15 Agt 2026
CVE-2026-74492 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtype_resize() copies comment po...	8.4 High	—	0,14%	15 Agt 2026
CVE-2026-74490 In the Linux kernel, the following vulnerability has been resolved: tipc: avoid use-after-free in poll trace queue dumps TIPC socket tracepoints dump queue state throug...	8.8 High	—	0,46%	15 Agt 2026
CVE-2026-74489 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix tid_tx use-after-free on BA session stop ieee80211_stop_tx_ba_cb() hands tid_tx...	8.8 High	—	0,34%	15 Agt 2026
CVE-2026-74488 In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames mwifiex_11n_dispatch_amsdu_pk...	8.8 High	—	0,26%	15 Agt 2026
CVE-2026-74485 In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: reject a flag character as the field delimiter The registration string starts with a us...	7.1 High	—	0,13%	15 Agt 2026
CVE-2026-74482 In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios __folio_split() keeps derefe...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74481 In the Linux kernel, the following vulnerability has been resolved: mm/page_reporting: use system_freezable_wq to fix UAF during suspend During PM freeze (e.g. S3 susp...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74480 Advisory In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group br_multicast_leave_group() iterates mp->por...	9.8 Critical	—	0,58%	15 Agt 2026
CVE-2026-74479 In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix proc entry use-after-free pktgen_change_name() replaces pkt_dev->entry while holdin...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74478 In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vector_mmsg_rx() When vector_mmsg_rx() discards a packet whose ove...	9.8 Critical	—	0,86%	15 Agt 2026
CVE-2026-74476 In the Linux kernel, the following vulnerability has been resolved: veth: convert frag_list skbs before running XDP A frag_list skb can reach veth with data_len set but...	9.1 Critical	—	0,49%	15 Agt 2026
CVE-2026-74475 In the Linux kernel, the following vulnerability has been resolved: vxlan: use neigh_ha_snapshot() in route_shortcircuit() The neighbour hardware address n->ha can be u...	10.0 Critical	—	0,45%	15 Agt 2026
CVE-2026-74474 In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskb_network_may_pull() for transmit path header pulls In vxlan_xmit(), arp_reduce(), and...	9.8 Critical	—	0,49%	15 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.