Katalog CVE (hal. 931)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.428 (Critical 36.758 · High 106.883 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 46.501–46.550 dari 267.428 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-64163 linux kernel In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs Running the kprobes sanity tests twice makes all tests...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64162 linux kernel In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idpf_ptp_init(), read_dev_clk_lock i...	9.8 Critical	—	0,44%	19 Jul 2026
CVE-2026-64161 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix eth_ports_node leak in probe The error path on of_property_read_u32() fai...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64160 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential for tearing in ->remote_i_size and ->zero_point Fix potential tearing in using...	9.8 Critical	—	0,43%	19 Jul 2026
CVE-2026-64159 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where i_size > remote_i_size Fix the update of the zero point[*] by netf...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64157 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfs_invalidate_folio(), if the region...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64156 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link writepages Fix netfs_write_single() and afs_single_writep...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64155 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used to directly...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64154 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_init(), node is obtained via of_...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64153 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Commit "iommu: return full error...	8.8 High	—	0,14%	19 Jul 2026
CVE-2026-64152 linux kernel In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is enabled Sashiko noticed a latent bug where the map err...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-64151 linux kernel In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out that the driver could...	8.4 High	—	0,16%	19 Jul 2026
CVE-2026-64150 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error...	9.8 Critical	—	0,65%	19 Jul 2026
CVE-2026-64149 linux kernel In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dma_map_resource() sanity check into debug code dma_map_resource() uses pfn_valid(...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64148 linux kernel In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait Fix two cases where pdsc_devcmd_wait() returns stal...	7.5 High	—	0,47%	19 Jul 2026
CVE-2026-64147 linux kernel In the Linux kernel, the following vulnerability has been resolved: pds_core: fix debugfs_lookup dentry leak and error handling debugfs_lookup() returns a dentry with a...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64146 linux kernel In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initialization commit bb88e8da0025 ("erofs: use meta buffers...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64145 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dma_buffer leak on bus acquire failure wilc_wlan_firmware_download() allocates d...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-64144 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb->setup_packet leak in error paths The setup_packet of control urb is not f...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64143 linux kernel In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced It seems that on som...	5.5 Medium	—	0,14%	19 Jul 2026
CVE-2026-64142 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: close durable scavenger races against m_fp_list lookups ksmbd_durable_scavenger() has two rel...	9.8 Critical	—	0,71%	19 Jul 2026
CVE-2026-64141 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in compare_guid_key() session_fd_check() walks the per-inode m_o...	7.5 High	—	0,63%	19 Jul 2026
CVE-2026-64140 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in proc_show_files() When a SMB2 client opens a file with a dura...	7.5 High	—	0,49%	19 Jul 2026
CVE-2026-64139 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Commit 299f962c0b02 ("ksmbd:...	5.5 Medium	—	0,17%	19 Jul 2026
CVE-2026-64138 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smb_validate_ntsd...	8.8 High	—	0,45%	19 Jul 2026
CVE-2026-64137 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFS_GENL_CMD_SWN_NOTIFY is the userspace witnes...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64136 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("...	9.8 Critical	—	0,41%	19 Jul 2026
CVE-2026-64135 linux kernel In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX adm1266_nvmem_read_blackbox...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64134 linux kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus iov_iter for silencing At transition to the iov_iter for PCM data trans...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64133 linux kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to retrieve a cached in...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64132 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6_event() Reported by Sashiko: In ipv6_hop_ioam(), the h...	9.8 Critical	—	0,49%	19 Jul 2026
CVE-2026-64131 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping device-private/exclusive pages Device private and exc...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64130 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free __GFP_ZEROTAGS se...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64129 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page When check_stable_address_s...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64128 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: drop ISO_END frames received without prior ISO_START ISO data PDUs carry a packet-bo...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64127 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer Commit 1c08108f3014 ("Blueto...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64126 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMT_OP_ADD_EXT_ADV_DATA is registere...	7.3 High	—	0,14%	19 Jul 2026
CVE-2026-64125 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting RBUF_EEE_EN \| RBUF_PM_EN in RBUF_ENERGY_CTRL breaks...	9.8 Critical	—	0,55%	19 Jul 2026
CVE-2026-64124 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-aligned size or SG length net_devmem_bind_dmabuf() tr...	8.8 High	—	0,17%	19 Jul 2026
CVE-2026-64123 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netlin...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64122 linux kernel In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover mlx5e_tx_reporter_timeout_recover...	9.8 Critical	—	0,63%	19 Jul 2026
CVE-2026-64121 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queues ifb_dev_init() allocates dp->tx_private to dev->nu...	7.1 High	—	0,13%	19 Jul 2026
CVE-2026-64120 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in phy_reply_size In phy_prepare_data(), several strings...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64119 linux kernel In the Linux kernel, the following vulnerability has been resolved: l2tp: use list_del_rcu in l2tp_session_unhash An unprivileged local user can pin a host CPU indefini...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64118 linux kernel In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qed_cxt_tables_alloc() If one of the later PF or VF CID bitmap allocations f...	8.4 High	—	0,15%	19 Jul 2026
CVE-2026-64117 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb ieee80211_invoke_fast_rx() reads RX...	8.8 High	—	0,27%	19 Jul 2026
CVE-2026-64116 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Reported by Sashiko: The function ipv6_hop_i...	7.5 High	—	0,51%	19 Jul 2026
CVE-2026-64115 linux kernel In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix UAF when peer resets connection during handshake vmci_transport_recv_connecting_serv...	8.8 High	—	0,14%	19 Jul 2026
CVE-2026-64114 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 raw_send_hdrinc() validates that the caller-suppli...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-64113 linux kernel In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevf_clean_rx_irq() prunes frames wh...	9.8 Critical	—	0,53%	19 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.