Katalog CVE (hal. 700)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.359 (Critical 36.559 · High 106.016 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 34.951–35.000 dari 265.359 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-72418 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e ("netfil...	7.5 High	—	0,72%	15 Agt 2026
CVE-2026-72417 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Add sanity check for iph->ihl...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72416 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must reject non-bridge targets xtables targets return netf...	7.3 High	—	0,17%	15 Agt 2026
CVE-2026-72415 In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Validate written enum value in ge_put_enum_double() ge_put_enum_double() passes the user...	7.1 High	—	0,16%	15 Agt 2026
CVE-2026-72412 In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of _PAGE_UNUSED pte bit The _PAGE_UNUSED softbit should not really be lying ar...	9.3 Critical	—	0,18%	15 Agt 2026
CVE-2026-72411 In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work Upon an MDIO CRC error mxl862xx_...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72410 In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validate NIX maximum LFs correctly NIX maximum number of LFs can be set via devlink co...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72409 In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms (Armada 370/XP/38x), mvn...	7.5 High	—	0,72%	15 Agt 2026
CVE-2026-72408 In the Linux kernel, the following vulnerability has been resolved: geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint geneve_gro_receive() reads the GRO hi...	10.0 Critical	—	0,55%	15 Agt 2026
CVE-2026-72407 In the Linux kernel, the following vulnerability has been resolved: geneve: validate inner network offset in geneve_gro_complete() Even with both paths gated on gs->gro...	10.0 Critical	—	0,55%	15 Agt 2026
CVE-2026-72406 In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup gem_init_one() calls gem_remove_one() when register_netdev() fa...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72405 In the Linux kernel, the following vulnerability has been resolved: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync Yue Sun reported a use-after-...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-72404 In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() TIPC UDP media bearer teardow...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72400 In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed fields seg6_validate_srh() reads fixed SRH fields suc...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72399 In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdp_frame The size of xdp_redirect_arr array is ENETC...	9.8 Critical	—	0,68%	15 Agt 2026
CVE-2026-72398 In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially pr...	9.8 Critical	—	0,75%	15 Agt 2026
CVE-2026-72397 In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() pmbus_data2reg_vid() hardcoded the VR1...	7.1 High	—	0,17%	15 Agt 2026
CVE-2026-72395 In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix passing events to regulator core Sashiko reports: Commit 754bd2b4a084 ("hwmon: (...	7.1 High	—	0,18%	15 Agt 2026
CVE-2026-72393 In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: don't cache shinfo across skb realloc fbnic_tx_lso() calls skb_cow_head() which may real...	9.8 Critical	—	0,63%	15 Agt 2026
CVE-2026-72390 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF The teql master->slaves s...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72389 In the Linux kernel, the following vulnerability has been resolved: bridge: stp: Fix a potential use-after-free when deleting a bridge The three STP timers are not supp...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72383 In the Linux kernel, the following vulnerability has been resolved: sctp: fix addr_wq_timer race in sctp_free_addr_wq() sctp_free_addr_wq() previously removed addr_wq_t...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72382 In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject undersized DACLs before parsing ACEs parse_dacl() limits the attacker-controlled ACE c...	8.8 High	—	0,63%	15 Agt 2026
CVE-2026-72381 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Two concurrent SMB2 durabl...	9.8 Critical	—	0,65%	15 Agt 2026
CVE-2026-72380 In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response req_id before indexing rsp[] pvcalls_front_event_handler() takes...	8.8 High	—	0,40%	15 Agt 2026
CVE-2026-72378 In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() The error codes on these paths are only set on the fir...	7.5 High	—	0,72%	15 Agt 2026
CVE-2026-72375 In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, in particular ->lock_work It seems that initalising afs_vnod...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72374 In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an...	7.5 High	—	0,72%	15 Agt 2026
CVE-2026-72373 In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_break_some_callbacks() Fix afs_break_some_callbacks() to...	7.5 High	—	0,63%	15 Agt 2026
CVE-2026-72372 In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net->cells_dyn_ino Fix the lack of locking around m...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72371 In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFS_VOLUME_RM_TREE is set on Fix afs_insert_volume_into_cell() to set AFS_VOLUME...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72369 In the Linux kernel, the following vulnerability has been resolved: minix: avoid overflow in bitmap block count calculation minix_check_superblock() uses minix_blocks_n...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72368 In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double unlock in nomem_d_alloc error path When start_creating() fails and returns -E...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72367 In the Linux kernel, the following vulnerability has been resolved: iomap: guard io_size EOF trim against concurrent truncate underflow iomap: fix zero padding data iss...	8.8 High	—	0,60%	15 Agt 2026
CVE-2026-72366 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle async cache object creation netfs_create_write_req() w...	9.8 Critical	—	0,67%	15 Agt 2026
CVE-2026-72364 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the error handling in writeback_iter() loop. If an error oc...	7.1 High	—	0,17%	15 Agt 2026
CVE-2026-72360 In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Currently defined VF/PF relay actions u...	8.4 High	—	0,17%	15 Agt 2026
CVE-2026-72358 In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding, xe_pt_...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72357 In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline In the unregister path we use __in_uprob...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72356 In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in t...	7.5 High	—	0,63%	15 Agt 2026
CVE-2026-72355 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix barriering when walking subrequest list Fix the barriering used when walking the subreque...	9.8 Critical	—	0,64%	15 Agt 2026
CVE-2026-72354 In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in MFT writeback ntfs_write_mft_block() maps each $MFT...	8.8 High	—	0,51%	15 Agt 2026
CVE-2026-72353 In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in fallocate ntfs_attr_fallocate() allocates holes and...	8.8 High	—	0,51%	15 Agt 2026
CVE-2026-72352 In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hid_bpf_get_data() returns a pointer into the HID-BPF c...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72351 In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offl...	9.8 Critical	—	0,75%	15 Agt 2026
CVE-2026-72350 In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts u32_match_it() executes rule-supplied shift operands...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72348 In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and rt matches c...	9.1 Critical	—	0,63%	15 Agt 2026
CVE-2026-72347 In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift parameters Revision 2 of the CONNMARK target accepts us...	7.3 High	—	0,17%	15 Agt 2026
CVE-2026-72345 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanu...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72344 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable mlx5_lag_get_dev_seq() will return...	7.8 High	—	0,17%	15 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.