Katalog CVE (hal. 857)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.336 (Critical 36.667 · High 106.392 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 42.801–42.850 dari 266.336 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-64322 linux kernel In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udf_load_sparable_map() accep...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64321 linux kernel In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmet_rdma_queue_connect() calls nvmet_r...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64320 linux kernel In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page nvmet_execute_disc_get_log_pag...	9.1 Critical	—	0,80%	25 Jul 2026
CVE-2026-64319 linux kernel In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer length nvmet_auth_reply() accesse...	9.1 Critical	—	0,56%	25 Jul 2026
CVE-2026-64318 linux kernel In the Linux kernel, the following vulnerability has been resolved: partitions: aix: bound the pp_count scan to the ppe array aix_partition() reads the physical volume...	7.1 High	—	0,16%	25 Jul 2026
CVE-2026-64317 linux kernel In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record get_symlink_chunk() and the SL handling...	7.1 High	—	0,17%	25 Jul 2026
CVE-2026-64316 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use print_hex_dump_devel() for dumpin...	5.5 Medium	—	0,12%	25 Jul 2026
CVE-2026-64315 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use print_hex_dump_devel() for dumpin...	7.0 High	—	0,15%	25 Jul 2026
CVE-2026-64314 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 template argument chachapoly_create() still accepts the...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64313 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when r01.m_h...	8.8 High	—	0,36%	25 Jul 2026
CVE-2026-64312 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on th...	7.5 High	—	0,50%	25 Jul 2026
CVE-2026-64311 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove broken and unused loongson-rng The loongson-rng rng_alg has several vulner...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64310 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: > if SEV initialization fails and...	5.5 Medium	—	0,17%	25 Jul 2026
CVE-2026-64309 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT) Sashiko notes: > if SEV initialization fa...	5.5 Medium	—	0,17%	25 Jul 2026
CVE-2026-64308 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD) Sashiko notes: > if SEV initialization...	5.5 Medium	—	0,17%	25 Jul 2026
CVE-2026-64307 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG) Sashiko notes: > if SEV initialization fa...	5.5 Medium	—	0,17%	25 Jul 2026
CVE-2026-64306 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning success on failure in CTR_DRBG drbg_ctr_generate() sometimes returns su...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64305 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations with service_lock The service_table list is protected...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64304 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths The generic RSA key parser (rsa_helper.c) bounds ea...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64303 linux kernel In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When dmaengine_prep_slave_sg() f...	9.8 Critical	—	0,69%	25 Jul 2026
CVE-2026-64302 linux kernel In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix freeing of PMD-sized vmemmap pages Commit bf9e4e30f353 ("x86/mm: use pagetable_free()"),...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64301 linux kernel In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() scmi_regulator_probe() calls of...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64300 linux kernel In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in map_range() map_range() reads rb->aux_pages[], rb->aux_nr_pages and rb->au...	7.8 High	—	0,18%	25 Jul 2026
CVE-2026-64299 linux kernel In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily NUL-ter...	7.1 High	—	0,17%	25 Jul 2026
CVE-2026-64298 linux kernel In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC POSIX requires write permission to trun...	7.1 High	—	0,15%	25 Jul 2026
CVE-2026-64297 linux kernel In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_extend_max_pages() module_extend_max_pages() calls...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64296 linux kernel In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_entry() In exfat_find_dir_entry(), each TYPE_EXTEND (...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64295 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access The page_ext itera...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64294 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm: do file ownership checks with the proper mount idmap Ever since idmapped mounts were introduced,...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64293 linux kernel In the Linux kernel, the following vulnerability has been resolved: iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read The bound-check in iommufd_veventq_...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64292 linux kernel In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happens inside...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64291 linux kernel In the Linux kernel, the following vulnerability has been resolved: iommufd: Set veventq_depth upper bound iommufd_veventq_alloc() accepts any !0 veventq_depth from use...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64290 linux kernel In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufd_fault_fops_read() On a copy_to_user() failure inside t...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64289 linux kernel In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on cache invalidation entry_num and entry_len iommufd_hwpt_invalidate() ta...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64288 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB VNCR TLB invalidation occurs from MMU notif...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64287 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU flush_hyp_vcpu() copies the host vGIC sta...	8.2 High	—	0,18%	25 Jul 2026
CVE-2026-64286 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU flush_hyp_vcpu() copies the hos...	8.2 High	—	0,18%	25 Jul 2026
CVE-2026-64285 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guest_mem...	5.5 Medium	—	0,14%	25 Jul 2026
CVE-2026-64284 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits Move the handling of fas...	7.1 High	—	0,13%	25 Jul 2026
CVE-2026-64283 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a g...	7.0 High	—	0,15%	25 Jul 2026
CVE-2026-64282 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier In the case that kvm_transla...	4.7 Medium	—	0,11%	25 Jul 2026
CVE-2026-64281 linux kernel In the Linux kernel, the following vulnerability has been resolved: svcrdma: wake sq waiters when the transport closes Threads parked in svc_rdma_sq_wait() on sc_sq_tic...	7.5 High	—	0,49%	25 Jul 2026
CVE-2026-64280 linux kernel In the Linux kernel, the following vulnerability has been resolved: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() afu_ioctl_dma_map() accepts a 64-...	8.8 High	—	0,17%	25 Jul 2026
CVE-2026-64279 linux kernel In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their id using i2c_get_adapt...	7.8 High	—	0,13%	25 Jul 2026
CVE-2026-64278 linux kernel In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C c...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64277 linux kernel In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count rmi_f3a_initialize() takes the GPIO c...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64276 linux kernel In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmi_f30_map_gpios() allocates gpi...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64275 linux kernel In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - prevent division by zero and arithmetic underflow The Elan I2C touchpad driver que...	5.5 Medium	—	0,16%	25 Jul 2026
CVE-2026-64274 linux kernel In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodix_ts_read_input_report() copies the num...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64273 linux kernel In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect index iforce_process_packet() handle...	7.8 High	—	0,17%	25 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.