Katalog CVE (hal. 935)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.555 (Critical 36.782 · High 106.936 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 46.701–46.750 dari 267.555 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-64089 linux kernel In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative last_changeset_len batadv_piv_tt::last_changeset_len len was declared a...	9.8 Critical	—	0,55%	19 Jul 2026
CVE-2026-64088 linux kernel In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative tt_buff_len batadv_orig_node::tt_buff_len was declared as s16, but the...	8.8 High	—	0,28%	19 Jul 2026
CVE-2026-64087 linux kernel In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject implausible blackbox record_count adm1266_nvmem_read_blackbox() loops...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64086 linux kernel In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer adm1266_pmbus_block_xfer() s...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-64085 linux kernel In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer adm1266_pmbus_block_x...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-64084 linux kernel In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR adm1266_gpio_get_multiple()...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-64083 linux kernel In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors adm1266_gpio_get() an...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64082 linux kernel In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from uninitialized cregs on error compat_riscv_gpr_set() calls cregs_...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64081 linux kernel In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Validate framework notification message layout Framework notifications carry an i...	8.4 High	—	0,19%	19 Jul 2026
CVE-2026-64080 linux kernel In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks under lock Both notification handlers currently look...	9.3 Critical	—	0,20%	19 Jul 2026
CVE-2026-64079 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: allocate hook ops while under mutex arp/ip(6)t_register_table() add the table t...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64078 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: add and use xtables_unregister_table_exit Previous change added xtables_unregis...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64077 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for x_tables, follow sam...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-64076 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init race sashiko reports for unrelated patch: Does the...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-64075 linux kernel In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregister_fprobe() to wait for RCU grace period Commit 4346ba1604093 ("fprobe: Rewrite...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-64074 linux kernel In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap statmount_mnt_idmap() writes one m...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-64073 linux kernel In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT On PREEMPT_RT, non-HARD irq_work run...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64072 linux kernel In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL, so we'd leak the bio if the inte...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64071 linux kernel In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_mem() nvme_free_host_mem() frees dev->hmb_sgt via dma...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64070 linux kernel In the Linux kernel, the following vulnerability has been resolved: powerpc/hv-gpci: fix preempt count leak in sysfs show paths Four sysfs show() callbacks in hv-gpci t...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64069 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read subrequests When the preparation of a new subreques...	9.8 Critical	—	0,65%	19 Jul 2026
CVE-2026-64068 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfs_retry_read_subrequests() and ne...	9.8 Critical	—	0,35%	19 Jul 2026
CVE-2026-64067 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream->subrequests locklessly The list of subrequests at...	9.8 Critical	—	0,50%	19 Jul 2026
CVE-2026-64066 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Fix netfs_read_to_pagecache() so tha...	9.8 Critical	—	0,65%	19 Jul 2026
CVE-2026-64065 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call The multiple runs of generic/013 test...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64064 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone If a streaming write is m...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64063 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In order to avoid reading whilst writing, netfslib will...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64062 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through mode Fix netfs_advance_writethrough() to always unloc...	5.5 Medium	—	0,09%	19 Jul 2026
CVE-2026-64061 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read_gaps() Fix netfs_read_gaps() to release the sink pa...	9.8 Critical	—	0,47%	19 Jul 2026
CVE-2026-64060 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfs_write_begin() error handling Fix netfs_write_begin() to not leak...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64059 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio->private handling in netfs_perform_write() Under some circumstances, netfs_perform_...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64058 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_folio() to wait on writeback Fix netfs_read_folio() to wait for an ongoing wri...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64057 linux kernel In the Linux kernel, the following vulnerability has been resolved: afs: Fix the locking used by afs_get_link() The afs filesystem in the kernel doesn't do locking corr...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64056 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets from fragments in gmac...	9.8 Critical	—	0,55%	19 Jul 2026
CVE-2026-64055 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter The gmac_rx() NAPI poll function assembles packets i...	9.8 Critical	—	0,51%	19 Jul 2026
CVE-2026-64054 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request net_shaper_nl_group_doit() does not deduplicat...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64053 linux kernel In the Linux kernel, the following vulnerability has been resolved: block: don't overwrite bip_vcnt in bio_integrity_copy_user() bio_integrity_add_page() already sets b...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64052 linux kernel In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() pin_user_pages_fast() can parti...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64051 linux kernel In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Add overflow check to remap_pfn_range during mmap The call to remap_pfn_range in qaic_ge...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64050 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: don't mix devm and drmm functions Mixing devm and drmm functions will result in a use-a...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-64049 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Before a5xx Adreno driver will not try fe...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64048 linux kernel In the Linux kernel, the following vulnerability has been resolved: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot On the SMC-D client, slot 0 of ini-...	7.5 High	—	0,50%	19 Jul 2026
CVE-2026-64047 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring When an sk_msg scatterlist...	9.8 Critical	—	0,51%	19 Jul 2026
CVE-2026-64038 linux kernel In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Stop work before releasing hwmon device Sashiko reports: In lm90_probe(), the devm ac...	4.7 Medium	—	0,09%	19 Jul 2026
CVE-2026-64040 linux kernel In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix error return when vfs_mkdir() fails When vfs_mkdir() fails, the error code is not ex...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64043 linux kernel In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting interface and adding new peer While deleting an existing ovpn interf...	4.7 Medium	—	0,11%	19 Jul 2026
CVE-2026-64046 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points out that if end = 0 (start != 0)...	9.8 Critical	—	0,51%	19 Jul 2026
CVE-2026-64045 linux kernel In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer pointer in ovpn_tcp_close() ovpn_tcp_close() loads the ovpn_socket via r...	8.4 High	—	0,19%	19 Jul 2026
CVE-2026-64044 linux kernel In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMD_NEW_PEER error path ovpn_nl_peer_new_doit()'s error path calls ov...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-64042 linux kernel In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Check BAR resources before exporting a DMABUF A DMABUF exports access to BAR resources and...	8.8 High	—	0,14%	19 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.