Katalog CVE (hal. 699)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.359 (Critical 36.559 · High 106.016 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 34.901–34.950 dari 265.359 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-72494 In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with completion The driver previously used a waitqueue along...	9.8 Critical	—	0,67%	15 Agt 2026
CVE-2026-72493 In the Linux kernel, the following vulnerability has been resolved: net: serialize netif_running() check in enqueue_to_backlog() Syzbot reported a KASAN slab-use-after-...	9.9 Critical	—	0,40%	15 Agt 2026
CVE-2026-72492 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in same_client_has_lease() same_client_has_lease() returns an opinfo point...	8.8 High	—	0,64%	15 Agt 2026
CVE-2026-72491 In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma->state in trans_rdma.c The rdma->state field is modified without...	9.8 Critical	—	0,72%	15 Agt 2026
CVE-2026-72489 In the Linux kernel, the following vulnerability has been resolved: staging: nvec: fix use-after-free in nvec_rx_completed() In nvec_rx_completed(), when an incomplete...	8.4 High	—	0,19%	15 Agt 2026
CVE-2026-72488 In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_count found by syzkaller The original implementation cau...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72487 In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-n...	7.7 High	—	0,19%	15 Agt 2026
CVE-2026-72485 In the Linux kernel, the following vulnerability has been resolved: coresight: platform: defer connection counter increment until alloc succeeds coresight_add_out_conn(...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72483 In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() The `max3421_hub_control()` fun...	7.8 High	—	0,19%	15 Agt 2026
CVE-2026-72482 In the Linux kernel, the following vulnerability has been resolved: gpib: fix double decrement of descriptor_busy in command_ioctl() commit d1857f8296dc ("gpib: fix use...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72480 In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling ams_event_to_channel() may...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72478 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add bounds check to run_get_highest_vcn() run_get_highest_vcn() parses a packed NTFS mappi...	8.4 High	—	0,20%	15 Agt 2026
CVE-2026-72477 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call _ntfs_bad_inode() when failing to rename It is safe to call _ntfs_bad_inode on live i...	9.8 Critical	—	0,65%	15 Agt 2026
CVE-2026-72476 In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_release_channel(), check chan->device->privatecnt afte...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72473 In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC completion rl_kref formerly served two distinct lifetimes...	9.8 Critical	—	0,72%	15 Agt 2026
CVE-2026-72472 In the Linux kernel, the following vulnerability has been resolved: nfs: use nfsi->rwsem to protect traversal of the file lock list Lingfeng identified a bug and sugges...	9.8 Critical	—	0,65%	15 Agt 2026
CVE-2026-72471 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent potential lcn remains uninitialized The target VCN being sought was not found with...	7.1 High	—	0,33%	15 Agt 2026
CVE-2026-72470 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log->one_page_buf when adopting on-disk page size log_replay() allocates log->one_p...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72469 In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE rpcrdma_cm_event_handler() falls through to the disco...	8.8 High	—	0,40%	15 Agt 2026
CVE-2026-72466 In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek rpcrdma_is_bcall() decodes a reply's first words to...	9.8 Critical	—	0,74%	15 Agt 2026
CVE-2026-72465 In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after parsing The out_norqst exit in rpcrdma_reply_handler...	7.5 High	—	0,68%	15 Agt 2026
CVE-2026-72464 In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed replies rpcrdma_wc_receive() decrements the transport...	7.5 High	—	0,68%	15 Agt 2026
CVE-2026-72463 In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb->dev refcnt unt...	9.8 Critical	—	0,44%	15 Agt 2026
CVE-2026-72462 In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when peer_path is used The holding a reference to the pe...	8.8 High	—	0,17%	15 Agt 2026
CVE-2026-72461 In the Linux kernel, the following vulnerability has been resolved: apparmor: fix refcount leak when updating the sk_ctx Currently update_sk_ctx() transfers the plabel...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72460 In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before no_new_privs test aa_change_profile() builds a replacement label...	7.1 High	—	0,13%	15 Agt 2026
CVE-2026-72459 In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a secid befor...	7.8 High	—	0,14%	15 Agt 2026
CVE-2026-72455 In the Linux kernel, the following vulnerability has been resolved: apparmor: fix uninitialised pointer passed to audit_log_untrustedstring() Commit 4a134723f9f1 ("appa...	7.1 High	—	0,16%	15 Agt 2026
CVE-2026-72454 In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() i3c_hci_addr_to_dev() walks bus->devs.i3c, whic...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72452 In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intel_crtc_put_color_blobs() drops the...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72451 In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The xfrm input state cache insertion code checks the valid...	9.8 Critical	—	0,67%	15 Agt 2026
CVE-2026-72450 In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds in x...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72449 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm The cleanup tail of kfd_criu_resume_svm()...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72446 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: reject stream disable with no active interface handle_uaudio_stream_req() res...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72444 In the Linux kernel, the following vulnerability has been resolved: flow_dissector: check device type before reading ETH_ADDRS __skb_flow_dissect() unconditionally read...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-72442 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Fix nf_flow_ip6_tunnel_proto() to use...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72440 In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writes_pending and barrier reference leaks on write failures raid1_make_request() acqu...	7.1 High	—	0,48%	15 Agt 2026
CVE-2026-72438 In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending and barrier reference leaks on discard failures raid10_make_request()...	7.5 High	—	0,46%	15 Agt 2026
CVE-2026-72436 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Sashiko pointed out tha...	9.8 Critical	—	0,71%	15 Agt 2026
CVE-2026-72435 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Sashiko pointed out that kfree_r...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72434 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: make sure gc is properly stopped Sashiko noticed that when destroying a set, cance...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72429 In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix type confusion of dst_entry IOAM uses a dummy dst_entry(null_dst) to mark that the d...	9.8 Critical	—	0,65%	15 Agt 2026
CVE-2026-72427 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF_F_PREORDER replace_effective_prog() and purge_effective...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72426 In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during half-slot cleanup __clean_func_state() cleans dead stack...	8.4 High	—	0,18%	15 Agt 2026
CVE-2026-72425 In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Resetting all VFs causes resource leak o...	7.1 High	—	0,18%	15 Agt 2026
CVE-2026-72423 In the Linux kernel, the following vulnerability has been resolved: bpf: Guard conntrack opts error writes The conntrack lookup and allocation kfuncs take an opts point...	8.8 High	—	0,18%	15 Agt 2026
CVE-2026-72422 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE conn->preauth_info is s...	9.8 Critical	—	0,72%	15 Agt 2026
CVE-2026-72421 In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/main tables. When CONFIG_IP_MULTIPLE_TABLES is enabled...	10.0 Critical	—	0,57%	15 Agt 2026
CVE-2026-72420 In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5_Overlap races while breaking stripe batches KCSAN report a race in break_stripe_b...	8.8 High	—	0,60%	15 Agt 2026
CVE-2026-72419 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() We ran into below KASAN...	7.8 High	—	0,18%	15 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.