Katalog CVE (hal. 856)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.336 (Critical 36.667 · High 106.392 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 42.751–42.800 dari 266.336 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-64372 linux kernel In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation pcc_cpufreq_do_osc() calls acpi_...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64371 linux kernel In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (part 1) Fix the easy cases where procfs cur...	5.5 Medium	—	0,13%	25 Jul 2026
CVE-2026-64370 linux kernel In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path In do_cpu_nanosleep(), posi...	5.5 Medium	—	0,13%	25 Jul 2026
CVE-2026-64369 linux kernel In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHE_WORD_ACCESS load_unaligned_zeropad() reads eight bytes from unaligne...	5.5 Medium	—	0,13%	25 Jul 2026
CVE-2026-64368 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled When init (zeroing) on al...	8.1 High	—	0,42%	25 Jul 2026
CVE-2026-64367 linux kernel In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodix_hid_set_raw_report...	7.8 High	—	0,19%	25 Jul 2026
CVE-2026-64366 linux kernel In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert wacom_wac_queue_insert() calls kf...	8.8 High	—	0,40%	25 Jul 2026
CVE-2026-64365 linux kernel In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on inrange_timer at driver unbind letsketch_driver does not provide a .remov...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64364 linux kernel In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of-bounds bit access on mt_io_flags mt_io_flags is a single unsigned long,...	8.8 High	—	0,36%	25 Jul 2026
CVE-2026-64363 linux kernel In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending key_up_timer in remove() appleir_remove() runs hid_hw_stop() before...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64362 linux kernel In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lg_g15_data is allocated with dev...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64361 linux kernel In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length check_and_correct_requested_leng...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64360 linux kernel In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize buffer in hfs_bnode_read hfs_bnode_read() can return early without writ...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64359 linux kernel In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers Syzbot reported a hung task in...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64358 linux kernel In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: cancel workqueue on release for supported platforms only Since a recent fix the mtk...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64357 linux kernel In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfs_exchmaps_estimate_overhead() adds the bmbt and rmapbt...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64356 linux kernel In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfs_dqinode_metadir_create() If xfs_metadir_create() fails in xfs_dqinode_me...	5.5 Medium	—	0,18%	25 Jul 2026
CVE-2026-64355 linux kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the...	9.8 Critical	—	0,51%	25 Jul 2026
CVE-2026-64354 linux kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btf_parse_struct_metas() walks user-supplie...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64353 linux kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Keep dynamic inner array lookups nullable An ARRAY_OF_MAPS can use an array created with BPF_F_...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64352 linux kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Allow LPM map access from sleepable BPF programs trie_lookup_elem() annotates its rcu_dereferen...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64351 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() kalmia_rx_fixup() computes usb_packet_l...	5.5 Medium	—	0,13%	25 Jul 2026
CVE-2026-64350 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() cdnsp_alloc_stream_info() all...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64349 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() The dwc3_ulpi_setup() calls...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64348 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehci_iso_sche...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64347 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler The OTG branch of composite_s...	5.5 Medium	—	0,10%	25 Jul 2026
CVE-2026-64346 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: Fix use-after-free in gadget_match_driver The udc structure acts as the management...	7.8 High	—	0,16%	25 Jul 2026
CVE-2026-64345 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_printer: take kref only for successful open printer_open() returns -EBUSY when the ch...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64344 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after-free on disconnect race mutex_unlock() may access the mutex structure af...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64343 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: ldusb: fix use-after-free on disconnect race mutex_unlock() may access the mutex structure afte...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64342 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect Submitted write URBs are not stopped on close() and...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64341 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect race mutex_unlock() may access the mutex structure...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64340 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-after-free on disconnect race mutex_unlock() may access the mutex structu...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64339 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk IN response length to the received transfer usbio_bulk_msg() copies bpk...	7.1 High	—	0,16%	25 Jul 2026
CVE-2026-64338 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720_probe() registers a parport before rea...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64337 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: unmap request DMA on queue failure mtu3_gadget_queue() maps the request before checking w...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64336 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan_pda: fix information leak The write() callback is supposed to return the number...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64335 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix broken rx after throttle If the port is closed while throttled, th...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64334 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If submitting the OOB write urb fails pe...	5.5 Medium	—	0,10%	25 Jul 2026
CVE-2026-64333 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer corruption The digi_write_inb_command() is supposed t...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64332 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64331 linux kernel In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref in vep_dequeue() vep_alloc_request() wasn't initializing vrequest->udc,...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64330 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdm_consume_modes() In svdm_consume_modes(), the SVID valu...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64329 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccg_irq_handler...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64328 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix DMA fence leak In ffs_dmabuf_transfer(), a ffs_dma_fence object is kmalloc'd,...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64327 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks When parsing endpoin...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64326 linux kernel In the Linux kernel, the following vulnerability has been resolved: block: skip sync_blockdev() on surprise removal in bdev_mark_dead() bdev_mark_dead()'s @surprise ==...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64325 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as report...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64324 linux kernel In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udf_free_blocks() checks the logical b...	7.8 High	—	0,16%	25 Jul 2026
CVE-2026-64323 linux kernel In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udf_load_vat() takes the virtual partitio...	7.1 High	—	0,17%	25 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.