Katalog CVE (hal. 704)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.369 (Critical 36.560 · High 106.018 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 35.151–35.200 dari 265.369 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-72103 In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a2...	7.3 High	—	0,16%	15 Agt 2026
CVE-2026-72102 Advisory In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_resume failure If dm_resume fails, the kernel attempts...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72100 In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of limits If dm_integrity_check_limits fails, the code wou...	8.8 High	—	0,46%	15 Agt 2026
CVE-2026-72099 In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already incremented in the loop "for...	7.1 High	—	0,55%	15 Agt 2026
CVE-2026-72098 Advisory In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if (n...	9.8 Critical	—	0,69%	15 Agt 2026
CVE-2026-72095 In the Linux kernel, the following vulnerability has been resolved: dma-fence: Make dma_fence_dedup_array() robust against 0-count input dma_fence_dedup_array() returns...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72093 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() When vm_insert_pages() fails, the err...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72090 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Use caller client for debug BO sync amdxdna_drm_sync_bo_ioctl() looks up args->handle...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72089 In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Reject firmware log with size smaller than header fw_log_from_bo() validates the tracing...	7.1 High	—	0,17%	15 Agt 2026
CVE-2026-72085 In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it scsiback_get_pend_req() o...	9.3 Critical	—	0,18%	15 Agt 2026
CVE-2026-72084 In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing to the received buffer core_scsi3_decode_spec_i_port(...	9.8 Critical	—	0,75%	15 Agt 2026
CVE-2026-72083 In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE core_scsi3_emulate_pro_regist...	9.8 Critical	—	0,72%	15 Agt 2026
CVE-2026-72080 In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix use-after-free during unmount During unmount or failure teardown all mon_data struct...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72072 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete When an offloaded MACsec RX SC...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72071 In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Fix use-after-free in user_event_mm_dup() user_event_mm_dup() walks the parent...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72069 Advisory In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() rt_spin_unlock() releases the RCU p...	9.8 Critical	—	0,73%	15 Agt 2026
CVE-2026-72067 In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhp_invoke_callback() unwinds earlier callback...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72066 In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output states_show() adds CPU hotplug state names into a si...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72065 In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the...	9.8 Critical	—	0,73%	15 Agt 2026
CVE-2026-72064 In the Linux kernel, the following vulnerability has been resolved: net: mana: Sync page pool RX frags for CPU MANA allocates RX buffers from page pool fragments when f...	9.8 Critical	—	0,50%	15 Agt 2026
CVE-2026-72061 In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAP_NET_ADMIN in the device netns for changelink ipip6_changelink() operates on at...	8.8 High	—	0,16%	15 Agt 2026
CVE-2026-72057 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across defragmentation tcf_ct_handle_fragments() calls nf_ct_h...	8.2 High	—	0,59%	15 Agt 2026
CVE-2026-72055 In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink vti6_changelink() operates on...	8.8 High	—	0,15%	15 Agt 2026
CVE-2026-72054 In the Linux kernel, the following vulnerability has been resolved: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink vti_changelink() operates on a...	8.8 High	—	0,15%	15 Agt 2026
CVE-2026-72053 In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAP_NET_ADMIN in the device netns for changelink ipip_changelink() operates on at...	8.8 High	—	0,15%	15 Agt 2026
CVE-2026-72052 In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink ip6gre_changelink() and ip6er...	8.8 High	—	0,15%	15 Agt 2026
CVE-2026-72051 In the Linux kernel, the following vulnerability has been resolved: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink ip6_tnl_changelink() opera...	8.8 High	—	0,15%	15 Agt 2026
CVE-2026-72049 In the Linux kernel, the following vulnerability has been resolved: ieee802154: admin-gate legacy LLSEC dump operations In net/ieee802154/netlink.c, the legacy IEEE8021...	7.1 High	—	0,14%	15 Agt 2026
CVE-2026-72046 In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-split and HW-GRO The DQO RX datapath programs a per-bu...	9.8 Critical	—	0,64%	15 Agt 2026
CVE-2026-72045 In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvu_mbox_handler_lmtst_tbl_setup() us...	8.8 High	—	0,15%	15 Agt 2026
CVE-2026-72043 In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() When hardware page table walker...	7.1 High	—	0,17%	15 Agt 2026
CVE-2026-72042 In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmi_alloc_recv_msg(user) takes the temporary us...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72041 In the Linux kernel, the following vulnerability has been resolved: espintcp: use sk_msg_free_partial to fix partial send sk_msg_free_partial() ensures consistency of t...	9.8 Critical	—	0,71%	15 Agt 2026
CVE-2026-72036 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked multiq_dequeue...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72035 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked When taprio's...	8.2 High	—	0,59%	15 Agt 2026
CVE-2026-72034 In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capable_wrt_mount() The recent fhandle RCU fix moved the mount na...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72033 In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fill_from_part() fill_from_part() computes the size...	9.8 Critical	—	0,79%	15 Agt 2026
CVE-2026-72029 In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: bound device offsets in the MUX downlink decoder mux_dl_adb_decode() walks a chain...	8.8 High	—	0,40%	15 Agt 2026
CVE-2026-72027 In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle free_pages_prepare() properly in compaction_free() free_pages_prepare() can fa...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-72024 In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion Queue wake, stop, and disable paths walk local->...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-72021 In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state lookup set_sctp_state() reads the SCTP chunk header...	8.2 High	—	0,59%	15 Agt 2026
CVE-2026-72020 In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Commit 9a05475cebdd ("ipvs: avoid kmem_cache_za...	9.8 Critical	—	0,71%	15 Agt 2026
CVE-2026-72019 In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsec_encrypt() macsec_encrypt() reads the Ethernet heade...	7.3 High	—	0,17%	15 Agt 2026
CVE-2026-72018 In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in move_data() The loopback move_data() performs a memcpy i...	7.8 High	—	0,17%	15 Agt 2026
CVE-2026-72014 In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recv_dless_read() receives a P_DATA_REPL...	9.8 Critical	—	0,72%	15 Agt 2026
CVE-2026-72012 In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when unregistering This ensures that any RCU readers travers...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-72009 In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI The MIPI DSI and CSI domains shar...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-72005 In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00lib_probe_dev() uses the full rt2...	7.8 High	—	0,16%	15 Agt 2026
CVE-2026-72003 In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmf_notify_auth_frame_rx() takes the...	8.8 High	—	0,35%	15 Agt 2026
CVE-2026-68479 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbt_parse_firmware() copies patch_length - 4 byte...	7.8 High	—	0,17%	15 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.