Katalog CVE (hal. 698)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.359 (Critical 36.559 · High 106.016 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 34.851–34.900 dari 265.359 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-74325 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link mt76_put_vif_phy_link() frees...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74323 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb() If link_conf or link_sta look...	8.8 High	—	0,38%	15 Agt 2026
CVE-2026-74321 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() In the beginning of the loop, w...	7.5 High	—	0,72%	15 Agt 2026
CVE-2026-74317 In the Linux kernel, the following vulnerability has been resolved: ixgbe: do not configure xps for XDP queues netif_set_xps_queue() should not be called for an XDP Tx...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74316 In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked_stid() nfsd4_drop_revoked_stid() has no SC_TYPE_LAYOU...	7.5 High	—	0,63%	15 Agt 2026
CVE-2026-74315 In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() file_hash() digests the first LOCK...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-74314 In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpf_obj_f...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74313 In the Linux kernel, the following vulnerability has been resolved: vduse: hold vduse_lock across IDR lookup in open path vduse_dev_open() looks up struct vduse_dev thr...	8.8 High	—	0,13%	15 Agt 2026
CVE-2026-74312 In the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: validate virtqueue index in mmap and fault paths vhost_vdpa_mmap() and vhost_vdpa_fault(...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74311 In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtio_device_restore() resets the device and r...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74310 In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vhost-net initializes one ubuf_info per outstanding zer...	9.3 Critical	—	0,14%	15 Agt 2026
CVE-2026-74309 In the Linux kernel, the following vulnerability has been resolved: vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Look up the IRQ index in oct_hw->irqs i...	10.0 Critical	—	0,65%	15 Agt 2026
CVE-2026-74306 In the Linux kernel, the following vulnerability has been resolved: vfio/qat: fix f_pos race in qat_vf_resume_write() qat_vf_resume_write() checks filp->f_pos before ta...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74305 In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for prog arrays The fix in commit abad3d0bad72 ("bpf: Fix...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74302 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() hci_unregister_dev() does not disable cmd_timer...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74300 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability element length Read Local Codec Capabilities returns a seq...	8.8 High	—	0,40%	15 Agt 2026
CVE-2026-74297 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size set_rq_size() computes the RQ WQE size as "1 << r...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74296 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Free the UAR index returned by t...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74295 In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: hdac_hdmi: Validate written enum value hdac_hdmi_set_pin_port_mux() uses the written e...	7.1 High	—	0,17%	15 Agt 2026
CVE-2026-74294 In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put callbacks use...	7.3 High	—	0,13%	15 Agt 2026
CVE-2026-74293 In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fsl_audmix: Validate written enum values fsl_audmix_put_mix_clk_src() and fsl_audmix_put_...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74292 In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210_ahub: Validate written enum value tegra_ahub_put_value_enum() reads e->values[...	7.1 High	—	0,17%	15 Agt 2026
CVE-2026-74289 In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). syzbot reported use-after-free in nsim_fi...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74288 In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). rocker_router_fib_event() calls fib_r...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74287 In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length sctp_verify_asconf() and sctp_verify_param() only v...	9.1 Critical	—	0,74%	15 Agt 2026
CVE-2026-74285 In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netif_rxq_cleanup_unlease() tears down...	8.8 High	—	0,17%	15 Agt 2026
CVE-2026-74283 In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutators TIPCv2 registers mutating generic-netlink operat...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74282 In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK tipc_sk_conn_proto_rcv() subtracts the peer-supplied...	7.5 High	—	0,70%	15 Agt 2026
CVE-2026-74281 In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer bindings tipc_update_nametbl() inserts a binding adve...	7.5 High	—	0,68%	15 Agt 2026
CVE-2026-74280 In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/octeontx - fix DMA cleanup using wrong loop index The sg_cleanup path used list[i] i...	10.0 Critical	—	0,76%	15 Agt 2026
CVE-2026-74279 In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong loop index The sg_cleanup error path used list[i] i...	10.0 Critical	—	0,76%	15 Agt 2026
CVE-2026-74277 In the Linux kernel, the following vulnerability has been resolved: iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path In iommu_dma_map_sg(), when...	8.8 High	—	0,17%	15 Agt 2026
CVE-2026-74275 In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() In cxl_cancel_auto_attach(), it ass...	8.4 High	—	0,18%	15 Agt 2026
CVE-2026-74270 In the Linux kernel, the following vulnerability has been resolved: handshake: Require admin permission for DONE command ACCEPT and DONE are the two downcalls of the ha...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74269 In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow The xdp.py test test_xdp_native_adjst_head_grow_data crash...	9.8 Critical	—	0,67%	15 Agt 2026
CVE-2026-74268 In the Linux kernel, the following vulnerability has been resolved: tcp: clear sock_ops cb flags before force-closing a child socket A child socket inherits the listene...	9.8 Critical	—	0,71%	15 Agt 2026
CVE-2026-74267 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Whenev...	9.8 Critical	—	0,71%	15 Agt 2026
CVE-2026-74264 In the Linux kernel, the following vulnerability has been resolved: net: watchdog: fix refcount tracking races Blamed commit converted the untracked dev_hold()/dev_put(...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74262 In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITE_ONCE() when changing lower socket callbacks kcm_attach() replaces a live lower TCP so...	7.8 High	—	0,19%	15 Agt 2026
CVE-2026-74260 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them Update nft_dup and nft_f...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74258 In the Linux kernel, the following vulnerability has been resolved: bpf: Guard __get_user acesss with access_ok for uprobe_multi data As reported by sashiko [1] we need...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-74257 In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udp_bpf_recvmsg() syzbot reported use-after-free of struct sk_msg in...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74256 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check start and len are u32, so u6...	8.4 High	—	0,19%	15 Agt 2026
CVE-2026-74255 In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot reported a slab-use-after-free in ipvlan_hard_header() wh...	9.8 Critical	—	0,50%	15 Agt 2026
CVE-2026-72502 In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) When MTU is large, ip6_default...	7.5 High	—	0,72%	15 Agt 2026
CVE-2026-72500 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Free the toggle page only after firmware...	8.8 High	—	0,18%	15 Agt 2026
CVE-2026-72499 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware teardown Free the toggle page only after firmware t...	8.8 High	—	0,18%	15 Agt 2026
CVE-2026-72497 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The variable WQE mode must be validated against the maximu...	8.8 High	—	0,18%	15 Agt 2026
CVE-2026-72496 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Proper rollback if the ioremap fails bnxt_qplib_alloc_dpi returns success even if iore...	9.2 Critical	—	0,14%	15 Agt 2026
CVE-2026-72495 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Applications can request multiple WC page...	9.3 Critical	—	0,20%	15 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.