Katalog CVE (hal. 697)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.359 (Critical 36.559 · High 106.016 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 34.801–34.850 dari 265.359 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-74411 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Correct data type for scan index to avoid infinite loop A kernel soft lockup was observ...	8.8 High	—	0,40%	15 Agt 2026
CVE-2026-74410 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer In rtw_pci_rx_napi(), new...	8.1 High	—	0,42%	15 Agt 2026
CVE-2026-74409 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: add bounds check on firmware mac_id in link lookup The mac_id field in RX descriptors i...	8.8 High	—	0,38%	15 Agt 2026
CVE-2026-74408 In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx status queue ID ath_tx_edma_tasklet() accesses sc->tx.t...	8.8 High	—	0,41%	15 Agt 2026
CVE-2026-74407 In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps...	8.8 High	—	0,40%	15 Agt 2026
CVE-2026-74406 In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). udp_tunnel_sock_release() could...	9.8 Critical	—	0,49%	15 Agt 2026
CVE-2026-74405 In the Linux kernel, the following vulnerability has been resolved: OPP: Fix race between OPP addition and lookup A race exists between dev_pm_opp_add_dynamic() and dev...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74404 In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one Sashiko notes: > regarding the bound...	7.8 High	—	0,19%	15 Agt 2026
CVE-2026-74403 In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Check for page allocation failure correctly in TIO Sashiko notes: > if __snp_alloc_fi...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74401 In the Linux kernel, the following vulnerability has been resolved: dlm: fix add msg handle in send_queue ordered In a benchmark scenario triggering a lot of requests t...	9.8 Critical	—	0,65%	15 Agt 2026
CVE-2026-74398 In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD addrconf_dad_failure() trans...	9.8 Critical	—	0,51%	15 Agt 2026
CVE-2026-74397 In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier mlx5_ib_alloc_transport_domai...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74396 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure mlx5r_umr_update_xlt() allocates and DMA maps...	7.5 High	—	0,73%	15 Agt 2026
CVE-2026-74394 In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate data length check imm_buf->len is a user-controlled uin...	9.8 Critical	—	0,54%	15 Agt 2026
CVE-2026-74390 In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs The irdma_copy_user_pgaddrs function...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74388 In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data The OSS sequencer processes the...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74387 In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize output teardown with event_input event_process_midi() borrows msynth->out...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74385 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock The return value of nvmet_tcp_set_queue_so...	7.5 High	—	0,44%	15 Agt 2026
CVE-2026-74384 In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nvme_ns_head struct nvme_ns_head contains a flexible a...	9.8 Critical	—	0,51%	15 Agt 2026
CVE-2026-74383 In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools nvme_setup_descriptor_pools() inde...	8.4 High	—	0,19%	15 Agt 2026
CVE-2026-74380 In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return value check Commit "iommu: return full error code from i...	8.8 High	—	0,18%	15 Agt 2026
CVE-2026-74378 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shar...	7.8 High	—	0,14%	15 Agt 2026
CVE-2026-74377 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74376 In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio for discard put_all_bios() always drops devs[i].bio,...	9.8 Critical	—	0,50%	15 Agt 2026
CVE-2026-74374 In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection with md_cloned_bio() Detect the error path using md_cloned...	7.5 High	—	0,63%	15 Agt 2026
CVE-2026-74371 In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat BPF_PROG_QUERY writes back the 'query.r...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74367 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix inconsistent arvif state in vdev_create error paths ath12k_mac_vdev_create() has t...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74365 In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handle preemption in BTT lane acquisition BTT lanes serialize access to per-lane metadat...	7.3 High	—	0,13%	15 Agt 2026
CVE-2026-74364 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject exclusive maps as inner maps in map-in-map An exclusive map (created with excl_prog_hash...	7.1 High	—	0,18%	15 Agt 2026
CVE-2026-74363 In the Linux kernel, the following vulnerability has been resolved: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs commit 4f375ade6aa9 ("bpf: Avoid RCU co...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74361 In the Linux kernel, the following vulnerability has been resolved: nvme: fix FDP fdpcidx bounds check The fdpcidx bounds check sets n = NUMFDPC + 1 but used > instead...	9.8 Critical	—	0,65%	15 Agt 2026
CVE-2026-74359 In the Linux kernel, the following vulnerability has been resolved: configfs_lookup(): don't leave ->s_dentry dangling on failure Normally ->s_dentry is cleared when de...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74357 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump The ring content dump in amdgp...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74356 In the Linux kernel, the following vulnerability has been resolved: vhost: fix vhost_get_avail_idx for a non empty ring vhost_get_avail_idx is supposed to report whethe...	7.4 High	—	0,24%	15 Agt 2026
CVE-2026-74355 In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info->node RB-tree member is zero-initial...	8.2 High	—	0,18%	15 Agt 2026
CVE-2026-74354 In the Linux kernel, the following vulnerability has been resolved: bpf: Take mmap_lock in zap_pages() zap_vma_range() requires the owning mm's mmap_lock to be held. T...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74350 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate fast symlink target during inode read ocfs2_validate_inode_block() already rejects s...	9.8 Critical	—	0,65%	15 Agt 2026
CVE-2026-74349 In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2_trim_mainbm() trims the global bitmap in cl...	7.1 High	—	0,13%	15 Agt 2026
CVE-2026-74347 In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Add a refcount for stru...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74345 In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siw_...	9.8 Critical	—	0,44%	15 Agt 2026
CVE-2026-74344 In the Linux kernel, the following vulnerability has been resolved: bpf: Clear rb node linkage when freeing bpf_rb_root bpf_rb_root_free() detaches the root by copying...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74343 In the Linux kernel, the following vulnerability has been resolved: kernfs: fix xattr race condition with multiple superblocks Multiple superblocks with different names...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74341 In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware response dispatch...	8.8 High	—	0,52%	15 Agt 2026
CVE-2026-74340 In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication The firmware-controlled...	8.1 High	—	0,42%	15 Agt 2026
CVE-2026-74338 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable BPF_LSM_CGROUP programs at load time The cgroup shim runs under rcu_read_lock_...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74334 In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Fix locking when accessing mr->pd Sashiko points out that, due to rereg_mr, the PD is ac...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74333 In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-legacy: Bound DAI link iteration create_sdw_dailinks() walks soc_dais until it fi...	8.4 High	—	0,19%	15 Agt 2026
CVE-2026-74332 In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-sof: Bound DAI link iteration create_sdw_dailinks() walks sof_dais until it finds...	8.4 High	—	0,20%	15 Agt 2026
CVE-2026-74330 In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of ->s_children Having the parent directory locked protects entrie...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74328 In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten ou...	8.8 High	—	0,17%	15 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.