Katalog CVE (hal. 768)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.139 (Critical 36.631 · High 106.324 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 38.351–38.400 dari 266.139 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-68314 In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctp_i3c_mod_init() registers th...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68305 In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers CCS read/write buffers are freed...	7.8 High	—	0,17%	10 Agt 2026
CVE-2026-68302 In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a poi...	9.8 Critical	—	0,48%	10 Agt 2026
CVE-2026-68300 In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when auth_chunk is NULL sctp_auth_chunk_verify() returns true un...	9.8 Critical	—	0,58%	10 Agt 2026
CVE-2026-68299 In the Linux kernel, the following vulnerability has been resolved: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets vmxnet3_get_hdr_len() assumes gdesc-...	7.5 High	—	0,50%	10 Agt 2026
CVE-2026-68298 In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create() Commit 9e9787414882 ("drm/xe/use...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68297 In the Linux kernel, the following vulnerability has been resolved: tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPC_NL_MEDIA_SET and TIPC_NL_B...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68295 In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and...	7.8 High	—	0,18%	10 Agt 2026
CVE-2026-68294 Advisory In the Linux kernel, the following vulnerability has been resolved: net: qrtr: restrict socket creation to the initial network namespace QRTR keeps its entire port and...	8.8 High	—	0,15%	10 Agt 2026
CVE-2026-68293 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32...	7.1 High	—	0,14%	10 Agt 2026
CVE-2026-68290 In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down listen socket rds_tcp_exit_net() frees the per-netns...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68287 In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix size calculations for 64-bit attributes net_dm_packet_report_fill() and net_dm_hw_...	7.5 High	—	0,68%	10 Agt 2026
CVE-2026-68284 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() tcp_bpf_sendmsg() keeps msg_tx across sk_...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68283 In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free freeing trigger private data Commit 61d445af0a7c ("tracing: Add bulk gar...	8.8 High	—	0,37%	10 Agt 2026
CVE-2026-68274 In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix buffer overflow in steered register list allocation The size calculation for the ste...	7.8 High	—	0,15%	10 Agt 2026
CVE-2026-68273 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix context pstate override handling There are several problems in the context pstate ha...	7.8 High	—	0,10%	10 Agt 2026
CVE-2026-68266 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttm_bo_type...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68265 In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC When prefetch region is DRM_XE_CONSULT_M...	7.3 High	—	0,13%	10 Agt 2026
CVE-2026-68264 In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() xe_pt_update_ops_init() fails to reset curren...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68263 In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix double call to drm_sched_entity_fini() Call sequence of double call: pvr_contex...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68262 In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvr_set_uobj_array() pvr_set_uobj_array() copies an array...	7.1 High	—	0,13%	10 Agt 2026
CVE-2026-68260 In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM The drm gpuvm code doesn't pro...	7.8 High	—	0,16%	10 Agt 2026
CVE-2026-68258 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weren't checking whether the val...	7.1 High	—	0,13%	10 Agt 2026
CVE-2026-68257 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation total_cwsr_size was computed in 32-bi...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68255 In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtio_get_edid_block() validates the read...	7.7 High	—	0,19%	10 Agt 2026
CVE-2026-68253 In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams[] bounds before overflow The data->streams[] overflow check is done aft...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68245 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() The vm pointer returned from amdgp...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68240 In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drm_gpusvm_get_pages() only...	8.8 High	—	0,16%	10 Agt 2026
CVE-2026-68236 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: set new_stream to NULL after release In dm_update_crtc_state(), the skip_modeset pa...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68230 In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zones_nu...	7.3 High	—	0,17%	10 Agt 2026
CVE-2026-68229 In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 ref_pic_list0/ref_pic...	7.1 High	—	0,16%	10 Agt 2026
CVE-2026-68228 In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move src_buf Removal to finish_encode During encoder processing, there is...	7.8 High	—	0,16%	10 Agt 2026
CVE-2026-68222 In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return queued buffers on start_streaming() failure The vb2 framework hands buffers t...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68219 In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by...	7.8 High	—	0,18%	10 Agt 2026
CVE-2026-68216 In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to th...	7.8 High	—	0,18%	10 Agt 2026
CVE-2026-68213 In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on start_streaming() failure The vb2 framework hands buffe...	7.8 High	—	0,18%	10 Agt 2026
CVE-2026-68210 In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notif...	7.8 High	—	0,18%	10 Agt 2026
CVE-2026-68209 In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on start_streaming() failure The vb2 framework hands buffers...	7.8 High	—	0,18%	10 Agt 2026
CVE-2026-68206 In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless...	7.8 High	—	0,18%	10 Agt 2026
CVE-2026-68204 In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2_is_busy() when toggling caps The vivid_update_format_cap/out() functions...	7.8 High	—	0,18%	10 Agt 2026
CVE-2026-68202 In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queue_delete() closes the queue timer, th...	7.8 High	—	0,18%	10 Agt 2026
CVE-2026-68201 In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its master detaches it snd_timer_close_locked() drains...	7.8 High	—	0,17%	10 Agt 2026
CVE-2026-68200 In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback that is still running The userspace-driven timer (u...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68199 In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB access from firmware ADDBA window size aggr_recv_addba_req_evt() logs a debug...	8.8 High	—	0,38%	10 Agt 2026
CVE-2026-68198 In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix use-after-free in aggr_reset_state() The aggr_reset_state() function uses timer_de...	8.8 High	—	0,28%	10 Agt 2026
CVE-2026-68196 In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: validate assoc response length before subtracting header wilc_parse_assoc_resp_info(...	8.3 High	—	0,41%	10 Agt 2026
CVE-2026-68192 In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: make release_scratchbuffers idempotent brcmf_pcie_release_scratchbuffers() frees the...	8.8 High	—	0,41%	10 Agt 2026
CVE-2026-68189 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Protect UUID list traversal The hci_sync conversion moved class-of-device and E...	7.8 High	—	0,12%	10 Agt 2026
CVE-2026-68179 In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock error paths nsm_dev_ioctl() jumps to the common out labe...	8.4 High	—	0,18%	10 Agt 2026
CVE-2026-68178 In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is open misc_open() installs a misc driver's file operati...	7.8 High	—	0,16%	10 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.