Katalog CVE (hal. 855)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.336 (Critical 36.667 · High 106.392 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 42.701–42.750 dari 266.336 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-64422 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid `net.ipv4.tcp_reord...	7.1 High	—	0,14%	25 Jul 2026
CVE-2026-64421 linux kernel In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix use-after-free on remove KASAN reports a slab-use-after-free in __media_en...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64420 linux kernel In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_drvdata() until probe success If ec_device_probe() fails, cros_ec_class_...	7.0 High	—	0,12%	25 Jul 2026
CVE-2026-64419 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() Reading the debugfs "count" file...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64418 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race with expansion expand_shrinker_info() iterates all vis...	7.8 High	—	0,10%	25 Jul 2026
CVE-2026-64417 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinker_debugfs_add() creates both "count" an...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64416 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host lookup_swap_cgroup_id() pa...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64415 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup We hit a real softlo...	5.5 Medium	—	0,09%	25 Jul 2026
CVE-2026-64414 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko reports: When an skb with unreadable fragments (such as...	7.5 High	—	0,44%	25 Jul 2026
CVE-2026-64413 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation,...	7.0 High	—	0,13%	25 Jul 2026
CVE-2026-64412 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, el...	7.1 High	—	0,13%	25 Jul 2026
CVE-2026-64411 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before find_table_lock() update_counters() and compat_upda...	7.1 High	—	0,13%	25 Jul 2026
CVE-2026-64410 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tu...	9.8 Critical	—	0,55%	25 Jul 2026
CVE-2026-64409 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() Every once in a while we see a hung...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64408 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: pin L2CAP connection during netdev registration bnep_add_connection() reads the L2C...	8.8 High	—	0,26%	25 Jul 2026
CVE-2026-64407 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() During the v3 firmware...	7.1 High	—	0,13%	25 Jul 2026
CVE-2026-64406 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in bt_accept_dequeue() bt_accept_get() takes a temporary reference before droppin...	8.0 High	—	0,28%	25 Jul 2026
CVE-2026-64405 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() hci_abort_conn() read hci_skb_event(hdev...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64404 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync() iso_conn_big_sync() drops the socket...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64403 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate option length before reading conf opt value l2cap_get_conf_opt() derives...	7.1 High	—	0,27%	25 Jul 2026
CVE-2026-64402 linux kernel In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() When the SMB sink is used as a perf...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64401 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifs_swn_notify() looks up a witness registrat...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64400 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversal bypass by restricting caseless retry ksmbd_vfs_path_lookup() enforces...	8.6 High	—	0,64%	25 Jul 2026
CVE-2026-64399 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE The FSCTL_DUPLICATE_EXTENTS_TO_FILE...	9.8 Critical	—	0,49%	25 Jul 2026
CVE-2026-64398 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTL_SET_ZERO_DATA FSCTL_SET_ZERO_DATA in smb2_ioctl() destroys f...	8.1 High	—	0,46%	25 Jul 2026
CVE-2026-64397 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERY_DIRECTORY requests per file smb2_query_dir() stores a pointer to its stack-al...	9.8 Critical	—	0,48%	25 Jul 2026
CVE-2026-64396 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation When a blocking byte-rang...	8.8 High	—	0,44%	25 Jul 2026
CVE-2026-64395 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTL_DUPLICATE_EXTENTS_TO_FILE passes the s...	7.5 High	—	0,41%	25 Jul 2026
CVE-2026-64394 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY commit cc57232cae23 ("ksmbd: fix...	8.8 High	—	0,47%	25 Jul 2026
CVE-2026-64393 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SET_INFO handlers call path-based VFS helpers after...	9.1 Critical	—	0,48%	25 Jul 2026
CVE-2026-64392 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for delete-on-close Delete-on-close can be completed by deferred or du...	9.1 Critical	—	0,51%	25 Jul 2026
CVE-2026-64391 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regula...	9.8 Critical	—	0,49%	25 Jul 2026
CVE-2026-64390 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection owning a byte-range lock SMB2_LOCK adds each granted byte-range lock to...	8.8 High	—	0,47%	25 Jul 2026
CVE-2026-64389 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before updating session key ksmbd_auth_ntlmv2() derives the NTLMv2 s...	8.2 High	—	0,49%	25 Jul 2026
CVE-2026-64388 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership (chown) and group (chgrp) modificat...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64387 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query directory replay double-free A response-bearing attempt can return a replayab...	9.8 Critical	—	0,46%	25 Jul 2026
CVE-2026-64386 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query_info() replay double-free A response-bearing attempt can return a replayable...	9.8 Critical	—	0,46%	25 Jul 2026
CVE-2026-64385 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_ioctl() replay A response-bearing attempt can return a replayab...	9.8 Critical	—	0,46%	25 Jul 2026
CVE-2026-64384 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: fix change notify replay double-free A response-bearing attempt can return a replayable...	9.8 Critical	—	0,46%	25 Jul 2026
CVE-2026-64383 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeepi...	9.8 Critical	—	0,46%	25 Jul 2026
CVE-2026-64382 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_open() replay A response-bearing attempt can return a replayabl...	8.8 High	—	0,35%	25 Jul 2026
CVE-2026-64381 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer leak in receive_encrypted_standard() receive_encrypted_standard() alloc...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64380 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posix_info_sid_size() reads sid[1] to obtain the subaut...	8.2 High	—	0,44%	25 Jul 2026
CVE-2026-64379 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dac...	7.1 High	—	0,31%	25 Jul 2026
CVE-2026-64378 linux kernel In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() When a container exits,...	7.8 High	—	0,10%	25 Jul 2026
CVE-2026-64377 linux kernel In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-cpufreq-hw: Fix possible double free qcom_cpufreq.data is allocated with devm_kzalloc(...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64376 linux kernel In the Linux kernel, the following vulnerability has been resolved: firmware_loader: fix device reference leak in firmware_upload_register() firmware_upload_register()...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64375 linux kernel In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (FD links) proc_pid_get_link() and proc_pid_...	7.8 High	—	0,11%	25 Jul 2026
CVE-2026-64374 linux kernel In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT RT migration is done aggressively. When...	7.5 High	—	0,39%	25 Jul 2026
CVE-2026-64373 linux kernel In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend race during reboot During system reboot, cpufreq_suspend() is called vi...	4.7 Medium	—	0,09%	25 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.