Katalog CVE (hal. 702)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.359 (Critical 36.559 · High 106.016 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 35.051–35.100 dari 265.359 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-72251 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale data pointer quoting sashiko: ------------------------...	9.8 Critical	—	0,71%	15 Agt 2026
CVE-2026-72250 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag nf_ct_frag6_reasm() sli...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72249 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP heade...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72248 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The combination of IPIP tunnel with direc...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72247 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in tuple dedup The "already exists" dedup logic in __nf...	7.5 High	—	0,70%	15 Agt 2026
CVE-2026-72244 In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of try_harder when alignment cannot be honoured The try_harder contiguous fallba...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72243 In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not upd...	8.4 High	—	0,17%	15 Agt 2026
CVE-2026-72242 In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() selinux_sctp_bind_connect() dere...	7.5 High	—	0,70%	15 Agt 2026
CVE-2026-72239 In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN" Revert 99cf1fb58e68 ("x...	9.3 Critical	—	0,18%	15 Agt 2026
CVE-2026-72235 In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskb_may_pull() in batadv_interface_rx...	8.8 High	—	0,34%	15 Agt 2026
CVE-2026-72234 In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pskb_may_pull() called by batad...	9.8 Critical	—	0,73%	15 Agt 2026
CVE-2026-72233 In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pull() called by batadv_bla_is_...	8.8 High	—	0,34%	15 Agt 2026
CVE-2026-72232 In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 ("net: bridge:...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72231 In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadv_send_tt_request() allocates a tt_...	7.5 High	—	0,68%	15 Agt 2026
CVE-2026-72227 In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests header Before the access to struct batadv_tvlv_mcast_...	8.1 High	—	0,33%	15 Agt 2026
CVE-2026-72226 In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the number of VLANs store...	9.8 Critical	—	0,76%	15 Agt 2026
CVE-2026-72225 In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() jbd2_journal_initialize_fast_co...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72222 In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback svc_tcp_handshake() stores the r...	9.8 Critical	—	0,64%	15 Agt 2026
CVE-2026-72221 In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callback when cancel loses race When wait_for_completion_in...	9.8 Critical	—	0,64%	15 Agt 2026
CVE-2026-72220 In the Linux kernel, the following vulnerability has been resolved: sunrpc: harden rq_procinfo lifecycle to prevent double-free The svc_release_rqst() function executes...	9.8 Critical	—	0,63%	15 Agt 2026
CVE-2026-72217 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing xdr_buf_to_bvec() writes a bio_vec into...	9.8 Critical	—	0,64%	15 Agt 2026
CVE-2026-72213 In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In alloc_hugetlb_folio(), a single h_cg...	7.1 High	—	0,16%	15 Agt 2026
CVE-2026-72211 In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfs_ir_reparent() moves the resident inde...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72210 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfs_mapping_pairs_decompress(), att...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72209 In the Linux kernel, the following vulnerability has been resolved: ntfs: validate attribute values on lookup ntfs_attr_find() and ntfs_external_attr_find() check that...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72208 In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfs_ea_lookup and ntfs_listxattr, this verifi...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72207 In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfs_resident_attr_resize() cannot grow...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72206 In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfs_index_block_inconsisent() to perform str...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72204 In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEX_ROOT header validation Add a dedicated helper to perform stricter validation...	8.4 High	—	0,18%	15 Agt 2026
CVE-2026-72203 In the Linux kernel, the following vulnerability has been resolved: ntfs: skip extent mft records in writeback to prevent deadlock This patch fixes the ABBA deadlock be...	7.5 High	—	0,63%	15 Agt 2026
CVE-2026-72202 In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid heap allocation for free-cluster readahead state get_nr_free_clusters() allocates a temp...	7.5 High	—	0,49%	15 Agt 2026
CVE-2026-72201 In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index ro...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72200 In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relati...	9.8 Critical	—	0,67%	15 Agt 2026
CVE-2026-72199 In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident index root values on lookup Resident $INDEX_ROOT values carry index header f...	9.8 Critical	—	0,55%	15 Agt 2026
CVE-2026-72198 In the Linux kernel, the following vulnerability has been resolved: ntfs: reject non-resident records for resident-only attributes The shared lookup-time attribute vali...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72197 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmove length In do_action()'s DeleteIndexEntryAllocatio...	8.4 High	—	0,19%	15 Agt 2026
CVE-2026-72196 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass In log_replay()'s analysis pass, af...	8.4 High	—	0,19%	15 Agt 2026
CVE-2026-72195 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attr_off in UpdateResidentValue against data_off In do_action()'s UpdateResidentValu...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72194 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow indx_find_buffer() recursive...	9.8 Critical	—	0,80%	15 Agt 2026
CVE-2026-72192 In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head indx_insert_into_root() promote...	9.8 Critical	—	0,74%	15 Agt 2026
CVE-2026-72191 In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx_insert_into_buffer indx_insert_into_buffer() computes...	9.8 Critical	—	0,70%	15 Agt 2026
CVE-2026-72188 In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name() ntfs_lookup_inode_by_name()...	9.1 Critical	—	0,50%	15 Agt 2026
CVE-2026-72186 In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is expose...	9.1 Critical	—	0,50%	15 Agt 2026
CVE-2026-72185 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() When ntfs_map_runlist_nolock()...	9.8 Critical	—	0,67%	15 Agt 2026
CVE-2026-72183 In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path LANDLOCK_SCOPE_SIGNAL must prevent a sa...	8.4 High	—	0,17%	15 Agt 2026
CVE-2026-72181 In the Linux kernel, the following vulnerability has been resolved: mips: sched: Fix CPUMASK_OFFSTACK memory corruption This patch addresses a critical memory managemen...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72175 In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race Patch series "userfaultfd/pagemap: pr...	7.1 High	—	0,17%	15 Agt 2026
CVE-2026-72172 In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE If DAX memory is hotplugged into an unocc...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72171 In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list register_device() links a new slram_mtdlist e...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72170 In the Linux kernel, the following vulnerability has been resolved: 9p: skip nlink update in cacheless mode to fix WARN_ON v9fs_dec_count() unconditionally calls drop_n...	7.8 High	—	0,17%	15 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.