Katalog CVE (hal. 769)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.139 (Critical 36.631 · High 106.324 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 38.401–38.450 dari 266.139 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-68177 In the Linux kernel, the following vulnerability has been resolved: tracing: Delay module ref count for "enable_event" trigger Triggers are now delayed from freeing, bu...	7.8 High	—	0,15%	10 Agt 2026
CVE-2026-68173 In the Linux kernel, the following vulnerability has been resolved: ublk: wait on ublk_dev_ready() instead of ub->completion ub->completion is only re-armed by a succes...	7.1 High	—	0,16%	10 Agt 2026
CVE-2026-68172 In the Linux kernel, the following vulnerability has been resolved: arm64: make huge_ptep_get handled unaligned addresses huge_ptep_get() can be handed a virtual addres...	7.1 High	—	0,16%	10 Agt 2026
CVE-2026-68170 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb->sk reference on subflow close The backlog list is updated by mptcp_data_ready(...	9.8 Critical	—	0,52%	10 Agt 2026
CVE-2026-68163 In the Linux kernel, the following vulnerability has been resolved: mm/page_vma_mapped: fix device-private PMD handling Commit 65edfda6f3f2 ("mm/rmap: extend rmap and m...	7.8 High	—	0,17%	10 Agt 2026
CVE-2026-68162 In the Linux kernel, the following vulnerability has been resolved: sctp: avoid auth_enable sysctl UAF during netns teardown proc_sctp_do_auth() updates the SCTP contro...	7.8 High	—	0,20%	10 Agt 2026
CVE-2026-68161 In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardown proc_sctp_do_udp_port() starts per-net SCTP UDP...	9.8 Critical	—	0,68%	10 Agt 2026
CVE-2026-68160 In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() ceph_handle_caps() reads sn...	9.8 Critical	—	0,77%	10 Agt 2026
CVE-2026-68159 In the Linux kernel, the following vulnerability has been resolved: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE __decode_pg_temp() decodes an...	9.8 Critical	—	0,75%	10 Agt 2026
CVE-2026-68158 In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decode_new_up_state_weight() If a message of type CEPH_MSG_O...	9.8 Critical	—	0,71%	10 Agt 2026
CVE-2026-68157 In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whos...	7.5 High	—	0,70%	10 Agt 2026
CVE-2026-68156 In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth->authorizer_buf{,_len} after authorizer update ceph_x_create_authorizer() cach...	9.8 Critical	—	0,69%	10 Agt 2026
CVE-2026-68155 In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPH_MSG_MON_MAP contains a monm...	7.5 High	—	0,70%	10 Agt 2026
CVE-2026-68154 In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crush_decode CRUSH bucket type 0 is reserved for devices. The...	9.8 Critical	—	0,71%	10 Agt 2026
CVE-2026-68153 In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardown ceph_destroy_client() tears down the monitor cl...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68152 In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works ca...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68149 In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() The ACL_DONT_CACHE state is meant to be a c...	8.4 High	—	0,14%	10 Agt 2026
CVE-2026-68148 In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock check in find_or_insert_direct_key() The legacy 'fscrypt_direct_keys...	7.8 High	—	0,09%	10 Agt 2026
CVE-2026-68147 In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocation in fscrypt_get_devices() When a blk_crypto_key starts being used o...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68145 Advisory In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmap_set() with zero-length range ifs_set_range_dirty() and ifs_set_range...	7.8 High	—	0,14%	10 Agt 2026
CVE-2026-68144 In the Linux kernel, the following vulnerability has been resolved: phonet: pep: fix use-after-free in pep_get_sb() pep_get_sb() doesn't consider that pskb_may_pull() m...	9.8 Critical	—	0,54%	10 Agt 2026
CVE-2026-68143 Advisory In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer reallocation sl_realloc_bufs() replaces rbuff and update...	7.8 High	—	0,11%	10 Agt 2026
CVE-2026-68142 In the Linux kernel, the following vulnerability has been resolved: geneve: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on a...	8.8 High	—	0,12%	10 Agt 2026
CVE-2026-68141 In the Linux kernel, the following vulnerability has been resolved: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() afiucv_hs_callback_syn() allocates the child...	7.5 High	—	0,52%	10 Agt 2026
CVE-2026-68140 In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use-after-free of a severed iucv_path af_iucv queues not-yet-received message notifica...	8.8 High	—	0,28%	10 Agt 2026
CVE-2026-68138 In the Linux kernel, the following vulnerability has been resolved: net/sched: serialize qdisc_rtab_list against concurrent get/put qdisc_get_rtab() and qdisc_put_rtab(...	7.8 High	—	0,22%	10 Agt 2026
CVE-2026-68137 In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free in x25_kill_by_neigh() x25_kill_by_neigh() walks the global X.25 socket...	9.8 Critical	—	0,54%	10 Agt 2026
CVE-2026-68136 In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 ("net-gro: Fix GRO flush w...	9.8 Critical	—	0,54%	10 Agt 2026
CVE-2026-68134 In the Linux kernel, the following vulnerability has been resolved: ptp: ptp_s390: Add missing facility check Only register the physical clock when facility 28 is insta...	7.3 High	—	0,13%	10 Agt 2026
CVE-2026-68131 In the Linux kernel, the following vulnerability has been resolved: rbd: Reset positive result codes to zero in object map update path In a reply message to an RBD requ...	7.5 High	—	0,52%	10 Agt 2026
CVE-2026-68129 In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure, page allo...	7.5 High	—	0,51%	10 Agt 2026
CVE-2026-68128 In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_profile_init set_bit(rslt->ptype, prof->ptypes) operate...	8.8 High	—	0,14%	10 Agt 2026
CVE-2026-68127 In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskb_may_pull in checksum adjust ila_csum_adjust_transport() caches ip...	9.8 Critical	—	0,54%	10 Agt 2026
CVE-2026-68125 In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames shorter than the authentication tag llsec_do_decrypt_auth() computes...	8.8 High	—	0,32%	10 Agt 2026
CVE-2026-68124 In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state...	9.6 Critical	—	0,34%	10 Agt 2026
CVE-2026-68123 In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVS_ACTION_ATTR_TRUNC currently stores a delta f...	9.8 Critical	—	0,55%	10 Agt 2026
CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to the PPPoE he...	7.8 High	—	0,37%	10 Agt 2026
CVE-2026-68120 In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing...	7.5 High	—	0,44%	10 Agt 2026
CVE-2026-68119 In the Linux kernel, the following vulnerability has been resolved: tcp: initialize standalone TCP-AO response padding tcp_v4_send_ack() and tcp_v6_send_response() cons...	7.5 High	—	0,37%	10 Agt 2026
CVE-2026-68118 In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcp_che...	8.2 High	—	0,39%	10 Agt 2026
CVE-2026-68117 In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() When tipc_sk_create() fails to in...	9.8 Critical	—	0,53%	10 Agt 2026
CVE-2026-68116 In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list of an MDB...	7.9 High	—	0,12%	10 Agt 2026
CVE-2026-68108 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE...	8.8 High	—	0,14%	10 Agt 2026
CVE-2026-68107 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcn_v4_0_enc...	8.8 High	—	0,10%	10 Agt 2026
CVE-2026-68106 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, w...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68104 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pm_genpd_remove() before freeing genpd Call pm_genpd_remove() to unregister from...	7.8 High	—	0,13%	10 Agt 2026
CVE-2026-68103 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject mapping a reserved doorbell to a new queue When creating an user-queue, the user...	7.1 High	—	0,15%	10 Agt 2026
CVE-2026-68100 In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl set_ntacl_dacl() copies each ACE from...	8.1 High	—	0,44%	10 Agt 2026
CVE-2026-68098 In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs set_ntacl_dacl() can stop copying ACEs before consuming...	8.8 High	—	0,41%	10 Agt 2026
CVE-2026-68097 In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities set_ntacl_dacl() validates sid.num_subauth befo...	8.8 High	—	0,45%	10 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.