Katalog CVE (hal. 767)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.139 (Critical 36.631 · High 106.324 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 38.301–38.350 dari 266.139 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-68420 In the Linux kernel, the following vulnerability has been resolved: xfrm: reject optional IPTFS templates in outbound policies syzbot reported a stack-out-of-bounds rea...	7.1 High	—	0,12%	10 Agt 2026
CVE-2026-68419 In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent rereg_mr for non-mem regions When a QP/CQ/SRQ is created, a two step process is...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68417 In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siw_create_qp() currently calls siw_qp_add() before the qu...	7.8 High	—	0,10%	10 Agt 2026
CVE-2026-68415 In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrm_state_gc_task can run long after a failed IP...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68414 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211_sched_scan_results() can queue...	7.5 High	—	0,23%	10 Agt 2026
CVE-2026-68409 Advisory In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: defer link RX stats percpu free to RCU sta_remove_link() frees a removed MLO link's...	8.8 High	—	0,26%	10 Agt 2026
CVE-2026-68404 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: use wiphy work for socket owner autodisconnect nl80211_netlink_notify() walks the cf...	7.8 High	—	0,17%	10 Agt 2026
CVE-2026-68402 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: bound element ID read when checking non-inheritance cfg80211_is_element_inherited()...	7.1 High	—	0,27%	10 Agt 2026
CVE-2026-68401 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() Sashiko (locally) reports mul...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68400 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation Use the descriptor's `ep...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68399 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in sock clone early bailouts Similar to recent commit 9b51a6155d14 ("bpf,fork: wipe ->b...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68398 In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tp_recv() runs in the L2...	7.8 High	—	0,23%	10 Agt 2026
CVE-2026-68397 In the Linux kernel, the following vulnerability has been resolved: net/iucv: take a reference on the socket found in afiucv_hs_rcv() afiucv_hs_rcv() looks up the desti...	8.8 High	—	0,26%	10 Agt 2026
CVE-2026-68394 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update MGMT_OP_LOAD_CONN_PARAM queues conn_update...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68393 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: extend conn_hash lookup critical sections Using RCU-protected pointers outside...	8.8 High	—	0,25%	10 Agt 2026
CVE-2026-68392 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Dereferencing RCU-protected pointers o...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68391 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds Dereferencing RCU-protected pointe...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68390 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups hci_conn_params_lookup requires hde...	8.8 High	—	0,22%	10 Agt 2026
CVE-2026-68389 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Clear memdump state on invalid dump size qca_controller_memdump() allocates qca-...	8.8 High	—	0,25%	10 Agt 2026
CVE-2026-68388 Advisory In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3_simple_fallocate_range() can skip...	9.8 Critical	—	0,51%	10 Agt 2026
CVE-2026-68387 In the Linux kernel, the following vulnerability has been resolved: can: raw: add locking for raw flags bitfield With commit 890e5198a6e5 ("can: raw: use bitfields to s...	7.8 High	—	0,17%	10 Agt 2026
CVE-2026-68385 In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csum_partial() without vector facility Currently csum_partial() calls csum_copy()...	9.8 Critical	—	0,49%	10 Agt 2026
CVE-2026-68384 In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves xe_bo_move() attaches VF CCS read/w...	7.8 High	—	0,10%	10 Agt 2026
CVE-2026-68383 In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Keep scheduler timeline name alive The scheduler keeps a pointer to the timeline name, b...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68382 In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynch...	7.8 High	—	0,11%	10 Agt 2026
CVE-2026-68381 In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2_oplock_break_noti() and smb2_lease_break...	9.8 Critical	—	0,46%	10 Agt 2026
CVE-2026-68380 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mm_struct in job scheduler amdxdna_cmd_submit() stores current-...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68379 In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIME_WAIT socket reference leak on PSP policy failure Release the TIME_WAIT socket referenc...	7.5 High	—	0,60%	10 Agt 2026
CVE-2026-68377 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_tunnel_key: Defer dst_release to RCU callback Fix a race-condition use-after-free in...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68376 In the Linux kernel, the following vulnerability has been resolved: sctp: fix auth_hmacs array size in struct sctp_cookie The auth_hmacs array in struct sctp_cookie is...	8.1 High	—	0,61%	10 Agt 2026
CVE-2026-68374 In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bos_descriptors_read() Add a lock to the function bos_descriptors_read...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68373 In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() at76_guess_freq() checks only that t...	8.1 High	—	0,28%	10 Agt 2026
CVE-2026-68371 In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed of_node in probe omap2430_probe() stores pdev->dev.of_node...	8.4 High	—	0,18%	10 Agt 2026
CVE-2026-68370 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback dummy_hcd embeds a single shared usb_...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68354 In the Linux kernel, the following vulnerability has been resolved: firewire: net: Fix fragmented datagram reassembly fwnet_frag_new() keeps a sorted list of received f...	8.8 High	—	0,28%	10 Agt 2026
CVE-2026-68353 In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler The firmware-controlled num_...	8.1 High	—	0,29%	10 Agt 2026
CVE-2026-68352 In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmware-controlled beacon_...	8.3 High	—	0,42%	10 Agt 2026
CVE-2026-68348 In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2781: bound firmware description string parsing The TAS2781 firmware parser reads several v...	7.1 High	—	0,13%	10 Agt 2026
CVE-2026-68343 In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parse_dfs_referrals() validates that the response co...	9.1 Critical	—	0,51%	10 Agt 2026
CVE-2026-68341 In the Linux kernel, the following vulnerability has been resolved: ovpn: fix use after free in unlock_ovpn() unlock_ovpn() iterates over the release_list using llist_f...	8.8 High	—	0,57%	10 Agt 2026
CVE-2026-68340 In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list o...	7.7 High	—	0,15%	10 Agt 2026
CVE-2026-68338 In the Linux kernel, the following vulnerability has been resolved: net/packet: avoid fanout hook re-registration after unregister packet_set_ring() temporarily detache...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68335 In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rds_find_bound() looks up the de...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68330 In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix DMA direction for NPU mailbox buffer airoha_npu_send_msg() always maps the mailbox...	7.8 High	—	0,16%	10 Agt 2026
CVE-2026-68329 In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() need_sync is a...	8.8 High	—	0,13%	10 Agt 2026
CVE-2026-68326 In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound uAP association event IEs to the event buffer mwifiex_process_uap_event() handl...	8.8 High	—	0,26%	10 Agt 2026
CVE-2026-68323 In the Linux kernel, the following vulnerability has been resolved: tipc: serialize udp bearer replicast list updates tipc_udp_rcast_add() and cleanup_bearer() both upd...	7.8 High	—	0,10%	10 Agt 2026
CVE-2026-68320 In the Linux kernel, the following vulnerability has been resolved: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid sctp_auth_ep_add_chunkid() uses...	7.3 High	—	0,13%	10 Agt 2026
CVE-2026-68316 In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix element size accounting for cmd stream validation There are 2 issues with the ele...	7.8 High	—	0,12%	10 Agt 2026
CVE-2026-68315 In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctp_process_strreset_inreq() When processing a RESET_IN_REQUEST from...	7.5 High	—	0,51%	10 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.