Katalog CVE (hal. 854)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.301 (Critical 36.664 · High 106.384 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 42.651–42.700 dari 266.301 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-64437 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL Commit f580d27e8928...	8.8 High	—	0,44%	25 Jul 2026
CVE-2026-64436 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_key_len for IPComp states pfkey_msg2xfrm_state() handles the IPComp (SAD...	7.1 High	—	0,13%	25 Jul 2026
CVE-2026-64435 linux kernel In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skb_queue_len() readers on audit_queue Multiple readers access audit_queue....	8.2 High	—	0,33%	25 Jul 2026
CVE-2026-64434 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref l2cap_chan_timeout() runs asynchron...	8.8 High	—	0,26%	25 Jul 2026
CVE-2026-64433 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete add_device_complete() runs from t...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64432 linux kernel In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns In the analysis pass of $LogFil...	7.8 High	—	0,14%	25 Jul 2026
CVE-2026-64431 linux kernel In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling post_write_mst_fixup() for invalid index_block ntfs_icx_ib_sync_write() calls po...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64430 linux kernel In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid calling pci_irq_vector() from hardirq context ntb_epf_vec_isr() calls pci_irq_vector...	7.5 High	—	0,49%	25 Jul 2026
CVE-2026-64429 linux kernel In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use raw_spinlock_t in the irq startup path sprd_eic_irq_unmask() enables the GPIO IR...	5.5 Medium	—	0,10%	25 Jul 2026
CVE-2026-64428 linux kernel In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use raw_spinlock_t in the irq startup path sch_irq_unmask() enables the GPIO IRQ and then...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64427 linux kernel In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e ("HID: logite...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64426 linux kernel In the Linux kernel, the following vulnerability has been resolved: io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE NOP file-acquisition support choses betw...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64425 linux kernel In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item commit 10dc95939817 ("io_uring/io-...	5.5 Medium	—	0,13%	25 Jul 2026
CVE-2026-64424 linux kernel In the Linux kernel, the following vulnerability has been resolved: netpoll: fix a use-after-free on shutdown path There is a use-after-free error on netpoll, which is...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64423 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a device is destroyed...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64422 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid `net.ipv4.tcp_reord...	7.1 High	—	0,14%	25 Jul 2026
CVE-2026-64421 linux kernel In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix use-after-free on remove KASAN reports a slab-use-after-free in __media_en...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64420 linux kernel In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_drvdata() until probe success If ec_device_probe() fails, cros_ec_class_...	7.0 High	—	0,12%	25 Jul 2026
CVE-2026-64419 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() Reading the debugfs "count" file...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64418 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race with expansion expand_shrinker_info() iterates all vis...	7.8 High	—	0,10%	25 Jul 2026
CVE-2026-64417 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinker_debugfs_add() creates both "count" an...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64416 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host lookup_swap_cgroup_id() pa...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64415 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup We hit a real softlo...	5.5 Medium	—	0,09%	25 Jul 2026
CVE-2026-64414 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko reports: When an skb with unreadable fragments (such as...	7.5 High	—	0,44%	25 Jul 2026
CVE-2026-64413 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation,...	7.0 High	—	0,13%	25 Jul 2026
CVE-2026-64412 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, el...	7.1 High	—	0,13%	25 Jul 2026
CVE-2026-64411 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before find_table_lock() update_counters() and compat_upda...	7.1 High	—	0,13%	25 Jul 2026
CVE-2026-64410 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tu...	9.8 Critical	—	0,55%	25 Jul 2026
CVE-2026-64409 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() Every once in a while we see a hung...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64408 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: pin L2CAP connection during netdev registration bnep_add_connection() reads the L2C...	8.8 High	—	0,26%	25 Jul 2026
CVE-2026-64407 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() During the v3 firmware...	7.1 High	—	0,13%	25 Jul 2026
CVE-2026-64406 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in bt_accept_dequeue() bt_accept_get() takes a temporary reference before droppin...	8.0 High	—	0,28%	25 Jul 2026
CVE-2026-64405 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() hci_abort_conn() read hci_skb_event(hdev...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64404 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync() iso_conn_big_sync() drops the socket...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64403 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate option length before reading conf opt value l2cap_get_conf_opt() derives...	7.1 High	—	0,27%	25 Jul 2026
CVE-2026-64402 linux kernel In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() When the SMB sink is used as a perf...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64401 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifs_swn_notify() looks up a witness registrat...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64400 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversal bypass by restricting caseless retry ksmbd_vfs_path_lookup() enforces...	8.6 High	—	0,64%	25 Jul 2026
CVE-2026-64399 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE The FSCTL_DUPLICATE_EXTENTS_TO_FILE...	9.8 Critical	—	0,49%	25 Jul 2026
CVE-2026-64398 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTL_SET_ZERO_DATA FSCTL_SET_ZERO_DATA in smb2_ioctl() destroys f...	8.1 High	—	0,46%	25 Jul 2026
CVE-2026-64397 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERY_DIRECTORY requests per file smb2_query_dir() stores a pointer to its stack-al...	9.8 Critical	—	0,48%	25 Jul 2026
CVE-2026-64396 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation When a blocking byte-rang...	8.8 High	—	0,44%	25 Jul 2026
CVE-2026-64395 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTL_DUPLICATE_EXTENTS_TO_FILE passes the s...	7.5 High	—	0,41%	25 Jul 2026
CVE-2026-64394 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY commit cc57232cae23 ("ksmbd: fix...	8.8 High	—	0,47%	25 Jul 2026
CVE-2026-64393 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SET_INFO handlers call path-based VFS helpers after...	9.1 Critical	—	0,48%	25 Jul 2026
CVE-2026-64392 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for delete-on-close Delete-on-close can be completed by deferred or du...	9.1 Critical	—	0,51%	25 Jul 2026
CVE-2026-64391 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regula...	9.8 Critical	—	0,49%	25 Jul 2026
CVE-2026-64390 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection owning a byte-range lock SMB2_LOCK adds each granted byte-range lock to...	8.8 High	—	0,47%	25 Jul 2026
CVE-2026-64389 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before updating session key ksmbd_auth_ntlmv2() derives the NTLMv2 s...	8.2 High	—	0,49%	25 Jul 2026
CVE-2026-64388 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership (chown) and group (chgrp) modificat...	7.8 High	—	0,13%	25 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.