Katalog CVE (hal. 701)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.359 (Critical 36.559 · High 106.016 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 35.001–35.050 dari 265.359 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-72343 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation mlx5e_hv_vhca_stats_create() is called fro...	8.4 High	—	0,20%	15 Agt 2026
CVE-2026-72342 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration race mlx5e_hv_vhca_stats_create() registers the stat...	8.4 High	—	0,20%	15 Agt 2026
CVE-2026-72340 In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72339 In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on build_skb failure qede_rx_build_skb() and qede_tpa_rx...	9.8 Critical	—	0,75%	15 Agt 2026
CVE-2026-72338 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload There is a TOCTOU race condition in fl...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72335 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix adv monitor add failure cleanup hci_add_adv_monitor() publishes a new adv_monit...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72334 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix malformed ISO_END/CONT handling Core specification (Part C vol 4 sec 5.4.5) does...	8.8 High	—	0,40%	15 Agt 2026
CVE-2026-72331 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix VMA access race aie2_populate_range() and amdxdna_umap_release() access a saved V...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72330 In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_read_sock() A peer may send a zero-length TLS applicat...	7.5 High	—	0,62%	15 Agt 2026
CVE-2026-72329 In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pci_dev LUT The PF SR-IOV enable path caches VF pci_dev pointers in dpi...	9.3 Critical	—	0,19%	15 Agt 2026
CVE-2026-72328 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential amdxdna_umap lifetime race amdxdna_umap_release() calls the blocking mm...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72323 In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() A race condition exists between device teardo...	9.8 Critical	—	0,72%	15 Agt 2026
CVE-2026-72322 In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed work A race condition exists between device teardown a...	9.8 Critical	—	0,72%	15 Agt 2026
CVE-2026-72320 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_lookup: fix catchall element handling with inverted lookups nft_lookup_eval() decides...	9.1 Critical	—	0,52%	15 Agt 2026
CVE-2026-72319 In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping th...	9.8 Critical	—	0,75%	15 Agt 2026
CVE-2026-72318 In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parse_dfs_referrals() validates that the response header...	9.4 Critical	—	0,59%	15 Agt 2026
CVE-2026-72317 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connect_worker The TLS connect path has a use-after-free:...	9.8 Critical	—	0,64%	15 Agt 2026
CVE-2026-72315 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix busy dentry warning on unmount after DIO Commit c68337442f03 ("cifs: Fix busy dentr...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72314 In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Compare against -EDEADLK...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72312 In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nix_set_rx_mode for a V...	7.9 High	—	0,15%	15 Agt 2026
CVE-2026-72310 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl bounds check smb2_ioctl_query_info() validates the PA...	8.1 High	—	0,64%	15 Agt 2026
CVE-2026-72304 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put In sof_ipc4_bytes_put(), the copy size is...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72303 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Validate notification payload size Validate MODULE_NOTIFICATION payload len...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72302 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc In sof_ipc3_control_update(...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72301 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get In sof_ipc3_bytes_put(), the size use...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72299 In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipc_sk_enqueue() runs with sk->sk_lock.slo...	9.8 Critical	—	0,75%	15 Agt 2026
CVE-2026-72298 In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() qrtr_endpoint_post() validates an inc...	8.4 High	—	0,19%	15 Agt 2026
CVE-2026-72297 In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATM...	7.1 High	—	0,16%	15 Agt 2026
CVE-2026-72296 In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife_decode() ife decode may return after making only th...	9.1 Critical	—	0,74%	15 Agt 2026
CVE-2026-72295 In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is n...	8.8 High	—	0,17%	15 Agt 2026
CVE-2026-72294 In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Function kvm_vcpu_ioctl_interrupt()...	8.8 High	—	0,18%	15 Agt 2026
CVE-2026-72291 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix unlikely race in try_get_locked_pte() Fix an unlikely race in try_get_locked_pte(), w...	9.3 Critical	—	0,18%	15 Agt 2026
CVE-2026-72289 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Check the interrupt is still ours before migrating it vgic_prune_ap_list() drops b...	9.3 Critical	—	0,19%	15 Agt 2026
CVE-2026-72288 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim report...	9.3 Critical	—	0,19%	15 Agt 2026
CVE-2026-72287 In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks Move the off-by-defaul...	7.8 High	—	0,14%	15 Agt 2026
CVE-2026-72286 In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring...	8.8 High	—	0,18%	15 Agt 2026
CVE-2026-72285 In the Linux kernel, the following vulnerability has been resolved: KVM: TDX: Reject concurrent change to CPUID entry count Reject KVM_TDX_INIT_VM if userspace changes...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72284 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "servic...	7.1 High	—	0,19%	15 Agt 2026
CVE-2026-72283 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails Nullify irqfd->producer if updat...	8.8 High	—	0,18%	15 Agt 2026
CVE-2026-72282 In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers kvm_io_bus_get_dev() returns a de...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72280 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 It is entirely possible for a guest to write to...	7.1 High	—	0,19%	15 Agt 2026
CVE-2026-72279 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR KVM currently maps the L1 VNCR into the h...	9.0 Critical	—	0,19%	15 Agt 2026
CVE-2026-72278 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Re-translate VNCR before injecting abort KVM faults in the VNCR page with FOLL_WRITE...	9.3 Critical	—	0,19%	15 Agt 2026
CVE-2026-72277 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory When constructing an L1 VNCR mapping, K...	9.3 Critical	—	0,19%	15 Agt 2026
CVE-2026-72262 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get The ipc_control_data buffer is alloc...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72261 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control In snd_sof_update_control(), firmwa...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72255 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst The br_netfilter fake rtable is...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72254 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: reject fib expression on the netdev egress hook A fib expression in a netdev egr...	7.5 High	—	0,61%	15 Agt 2026
CVE-2026-72253 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it tc ingress and openvswitch do no...	7.5 High	—	0,70%	15 Agt 2026
CVE-2026-72252 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: don't leak bad clone into future transaction On memory allocation failure...	7.8 High	—	0,17%	15 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.