Katalog CVE (hal. 934)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.555 (Critical 36.782 · High 106.936 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 46.651–46.700 dari 267.555 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-64139 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Commit 299f962c0b02 ("ksmbd:...	5.5 Medium	—	0,17%	19 Jul 2026
CVE-2026-64138 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smb_validate_ntsd...	8.8 High	—	0,45%	19 Jul 2026
CVE-2026-64137 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFS_GENL_CMD_SWN_NOTIFY is the userspace witnes...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64136 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("...	9.8 Critical	—	0,41%	19 Jul 2026
CVE-2026-64135 linux kernel In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX adm1266_nvmem_read_blackbox...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64134 linux kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus iov_iter for silencing At transition to the iov_iter for PCM data trans...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64133 linux kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to retrieve a cached in...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64132 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6_event() Reported by Sashiko: In ipv6_hop_ioam(), the h...	9.8 Critical	—	0,49%	19 Jul 2026
CVE-2026-64131 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping device-private/exclusive pages Device private and exc...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64130 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free __GFP_ZEROTAGS se...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64129 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page When check_stable_address_s...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64128 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: drop ISO_END frames received without prior ISO_START ISO data PDUs carry a packet-bo...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64127 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer Commit 1c08108f3014 ("Blueto...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64126 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMT_OP_ADD_EXT_ADV_DATA is registere...	7.3 High	—	0,14%	19 Jul 2026
CVE-2026-64125 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting RBUF_EEE_EN \| RBUF_PM_EN in RBUF_ENERGY_CTRL breaks...	9.8 Critical	—	0,55%	19 Jul 2026
CVE-2026-64124 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-aligned size or SG length net_devmem_bind_dmabuf() tr...	8.8 High	—	0,17%	19 Jul 2026
CVE-2026-64123 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netlin...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64122 linux kernel In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover mlx5e_tx_reporter_timeout_recover...	9.8 Critical	—	0,63%	19 Jul 2026
CVE-2026-64121 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queues ifb_dev_init() allocates dp->tx_private to dev->nu...	7.1 High	—	0,13%	19 Jul 2026
CVE-2026-64120 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in phy_reply_size In phy_prepare_data(), several strings...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64119 linux kernel In the Linux kernel, the following vulnerability has been resolved: l2tp: use list_del_rcu in l2tp_session_unhash An unprivileged local user can pin a host CPU indefini...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64118 linux kernel In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qed_cxt_tables_alloc() If one of the later PF or VF CID bitmap allocations f...	8.4 High	—	0,15%	19 Jul 2026
CVE-2026-64117 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb ieee80211_invoke_fast_rx() reads RX...	8.8 High	—	0,27%	19 Jul 2026
CVE-2026-64116 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Reported by Sashiko: The function ipv6_hop_i...	7.5 High	—	0,51%	19 Jul 2026
CVE-2026-64115 linux kernel In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix UAF when peer resets connection during handshake vmci_transport_recv_connecting_serv...	8.8 High	—	0,14%	19 Jul 2026
CVE-2026-64114 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 raw_send_hdrinc() validates that the caller-suppli...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-64113 linux kernel In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevf_clean_rx_irq() prunes frames wh...	9.8 Critical	—	0,53%	19 Jul 2026
CVE-2026-64112 linux kernel In the Linux kernel, the following vulnerability has been resolved: rbd: eliminate a race in lock_dwork draining on unmap Given how rbd_lock_add_request() and rbd_img_e...	7.8 High	—	0,10%	19 Jul 2026
CVE-2026-64111 linux kernel In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr() Just as proc_pid_attr_write() already does before...	7.1 High	—	0,14%	19 Jul 2026
CVE-2026-64110 linux kernel In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igc_fpe_xmit_smd_frame() When igc_fpe_init_tx_descriptor() fails, no...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64109 linux kernel In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() unix_stream_data_wait() does skb_peek_...	8.8 High	—	0,13%	19 Jul 2026
CVE-2026-64108 linux kernel In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Since commit 340cea84f691c ("cifs: open files should not...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64107 linux kernel In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() In the pcm512x chipse...	5.5 Medium	—	0,14%	19 Jul 2026
CVE-2026-64106 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Userspace can restore a...	9.0 Critical	—	0,15%	19 Jul 2026
CVE-2026-64105 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Free private_irqs when init fails after allocation Companion to commit 250f25367b5...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64104 linux kernel In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Explicitly leak pages in unknown state When set_memory_{encrypted,decrypted}() fail...	8.7 High	—	0,17%	19 Jul 2026
CVE-2026-64103 linux kernel In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal path The ISCI completion tasklet is initialized in...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64102 linux kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw peer...	9.8 Critical	—	0,50%	19 Jul 2026
CVE-2026-64101 linux kernel In the Linux kernel, the following vulnerability has been resolved: fwctl: pds: Validate RPC input size before parsing The fwctl core allocates the device-specific RPC...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64100 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVE_LOCKING on an Snapdragon X1 and VM reclaim pressure, we se...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64099 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arrays on error path The CPU job ioctl's fail label cal...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64098 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates virtio_gpu_cursor_plane_update() and vir...	7.8 High	—	0,11%	19 Jul 2026
CVE-2026-64097 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate GPIO pin LUT table size before iterating [Why&How] The GPIO pin table pars...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64096 linux kernel In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orig_node RCU release batadv_mcast_purge_orig() removes ent...	8.8 High	—	0,26%	19 Jul 2026
CVE-2026-64095 linux kernel In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid double decrement of bla.num_requests The bla.num_requests is increased when n...	7.1 High	—	0,27%	19 Jul 2026
CVE-2026-64094 linux kernel In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnl_lock held, a hard...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64093 linux kernel In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: directly shut down timer on cleanup batadv_tp_sender_cleanup() was calling tim...	8.8 High	—	0,35%	19 Jul 2026
CVE-2026-64092 linux kernel In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown The receiver shutdown timer ha...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64091 linux kernel In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first che...	9.8 Critical	—	0,43%	19 Jul 2026
CVE-2026-64090 linux kernel In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid empty VLAN responses The commit 16116dac2339 ("batman-adv: prevent TT request...	5.5 Medium	—	0,13%	19 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.