Katalog CVE (hal. 703)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.359 (Critical 36.559 · High 106.016 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 35.101–35.150 dari 265.359 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-72165 In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix condition in 'nand_select_target()' 'cs' here must be in range [0:nanddev_ntargets...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72164 In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2_IOC_MOVE_EXT operations, userspa...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72162 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec [BUG] On-disk corruption setti...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72160 In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical i_mode type Patch series "ocfs2: harden inode validators ag...	8.8 High	—	0,65%	15 Agt 2026
CVE-2026-72157 In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags[] overflow by bounding frame_count tbnet_poll() assembles a multi-frame...	8.8 High	—	0,35%	15 Agt 2026
CVE-2026-72154 In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jump_label smp syncing The original commit 8c30b0018f9d ("openrisc: Add jump label sup...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72151 In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt tpm_buf_append_salt() in dr...	8.4 High	—	0,20%	15 Agt 2026
CVE-2026-72149 In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Currently, the Tegra GPC DMA hardware requires the tran...	7.5 High	—	0,65%	15 Agt 2026
CVE-2026-72148 In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK The DONE_INT_MASK and A...	8.8 High	—	0,33%	15 Agt 2026
CVE-2026-72146 In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requ...	8.4 High	—	0,18%	15 Agt 2026
CVE-2026-72144 In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dell_init() initializes several r...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72143 In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Restore SST-PP control to all domains The SST-PP control offset is only restored...	7.1 High	—	0,17%	15 Agt 2026
CVE-2026-72141 In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) SMBus 3.1 6.5.7 allows a Block Read byte cou...	7.5 High	—	0,61%	15 Agt 2026
CVE-2026-72139 In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5sig_info kfree past RCU grace period in tcp_connect The md5+ao reconciliation in tcp_c...	9.8 Critical	—	0,63%	15 Agt 2026
CVE-2026-72137 In the Linux kernel, the following vulnerability has been resolved: xfrm: nat_keepalive: avoid double free on send error nat_keepalive_send() frees the keepalive skb wh...	9.8 Critical	—	0,71%	15 Agt 2026
CVE-2026-72136 In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink xfrmi_changelink() op...	8.8 High	—	0,17%	15 Agt 2026
CVE-2026-72135 In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable The TPM character devices expose a sequential comma...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72134 In the Linux kernel, the following vulnerability has been resolved: spi: imx: reconfigure for PIO when DMA cannot be started When spi_imx_can_dma() selects DMA, the ECS...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72133 In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order before devm_request_irq() The driver calls devm_r...	8.4 High	—	0,18%	15 Agt 2026
CVE-2026-72130 Advisory In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers nvmet_execute_auth_receive() trusts the AUTH_RECEIVE a...	9.8 Critical	—	0,75%	15 Agt 2026
CVE-2026-72129 Advisory In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero offset nvmet_rdma_use_inline_sg() maps the host-contro...	9.8 Critical	—	0,71%	15 Agt 2026
CVE-2026-72126 In the Linux kernel, the following vulnerability has been resolved: can: isotp: use unconditional synchronize_rcu() in isotp_release() isotp_notify() unregisters the (R...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72125 In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER isotp_release() looked up the...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72124 In the Linux kernel, the following vulnerability has been resolved: can: isotp: serialize TX state transitions under so->rx_lock The TX state machine (so->tx.state) is...	8.8 High	—	0,35%	15 Agt 2026
CVE-2026-72123 In the Linux kernel, the following vulnerability has been resolved: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 ("can: bcm:...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72122 In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure bcm_sendmsg() reads bo->ifinde...	7.3 High	—	0,16%	15 Agt 2026
CVE-2026-72121 In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and timer values KCSAN detected a simultaneous access to...	8.8 High	—	0,35%	15 Agt 2026
CVE-2026-72120 In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and operations sashiko-bot remarked the missing use of li...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72119 In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcm_tx_lock usage for data and timer updates Stage new CAN frame content for an exi...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72116 In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix stale rx/tx ops after device removal RX: an RX_SETUP update(!) for an existing op skip...	7.1 High	—	0,19%	15 Agt 2026
CVE-2026-72115 In the Linux kernel, the following vulnerability has been resolved: can: bcm: track a single source interface for ANYDEV timeout/throttle ops An ANYDEV rx op (ifindex =...	8.1 High	—	0,30%	15 Agt 2026
CVE-2026-72114 In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm_rx_setup() for RTR replies bcm_tx_setup() validates cf->len a...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72113 In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing device refcount for CAN filter removal sashiko-bot remarked a problem with a c...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72112 In the Linux kernel, the following vulnerability has been resolved: io_uring/bpf-ops: reject re-registration of an already-bound ops io_install_bpf() only rejects a sec...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72111 In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register bounds before narrowing retval range in check_mem_access() When the BPF verifier...	8.8 High	—	0,18%	15 Agt 2026
CVE-2026-72110 In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe ->bpf_storage before bailouts that access it Currently, copy_process() can bail out t...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72109 In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5_register_notifier_blocks() register...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72108 In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consistency on commit failure __reserve_metadata_snap() and...	7.8 High	—	0,26%	15 Agt 2026
CVE-2026-72107 In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-zero start sector dm-era tracks writes in target-rel...	8.8 High	—	0,65%	15 Agt 2026
CVE-2026-72105 In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit machines Commit c20e36b7631d ("dm log: fix out-of-bounds...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72103 In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a2...	7.3 High	—	0,16%	15 Agt 2026
CVE-2026-72102 Advisory In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_resume failure If dm_resume fails, the kernel attempts...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72100 In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of limits If dm_integrity_check_limits fails, the code wou...	8.8 High	—	0,46%	15 Agt 2026
CVE-2026-72099 In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already incremented in the loop "for...	7.1 High	—	0,55%	15 Agt 2026
CVE-2026-72098 Advisory In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if (n...	9.8 Critical	—	0,69%	15 Agt 2026
CVE-2026-72095 In the Linux kernel, the following vulnerability has been resolved: dma-fence: Make dma_fence_dedup_array() robust against 0-count input dma_fence_dedup_array() returns...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72093 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() When vm_insert_pages() fails, the err...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72090 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Use caller client for debug BO sync amdxdna_drm_sync_bo_ioctl() looks up args->handle...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72089 In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Reject firmware log with size smaller than header fw_log_from_bo() validates the tracing...	7.1 High	—	0,17%	15 Agt 2026
CVE-2026-72085 In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it scsiback_get_pend_req() o...	9.3 Critical	—	0,18%	15 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.