Katalog CVE (hal. 936)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.555 (Critical 36.782 · High 106.936 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 46.751–46.800 dari 267.555 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-64041 linux kernel In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210x_effect_scene_info(), a string was copie...	7.8 High	—	0,19%	19 Jul 2026
CVE-2026-64039 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned regions The snapshotting code internally aligns data...	7.7 High	—	0,19%	19 Jul 2026
CVE-2026-64037 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled When the TLC notification...	9.8 Critical	—	0,43%	19 Jul 2026
CVE-2026-64036 linux kernel In the Linux kernel, the following vulnerability has been resolved: cgroup/rstat: validate cpu before css_rstat_cpu() access css_rstat_updated() is exposed as a BPF kfu...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64035 linux kernel In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igc_fpe_init_smd_frame() initializes...	9.8 Critical	—	0,44%	19 Jul 2026
CVE-2026-64034 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer In mana_hwc_rx_event_handler(), res...	9.3 Critical	—	0,12%	19 Jul 2026
CVE-2026-64033 linux kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Fix use-after-free in path file creation cleanup In the error path of rtrs_srv_create_pat...	9.8 Critical	—	0,49%	19 Jul 2026
CVE-2026-64032 linux kernel In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast sno...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64031 linux kernel In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned extents After unaligned compressed extents were introduc...	7.8 High	—	0,10%	19 Jul 2026
CVE-2026-64030 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs IEEE80211_MLE_STA_EPCS_CONTROL_LINK_ID is...	8.8 High	—	0,24%	19 Jul 2026
CVE-2026-64028 linux kernel In the Linux kernel, the following vulnerability has been resolved: tracing: Avoid NULL return from hist_field_name() on truncation hist_field_name() returns "" everywh...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64022 linux kernel In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the aggregator The dynamic software nod...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64021 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix exec_queue leak on width check in stream open In xe_oa_stream_open_ioctl(), when para...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64029 linux kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->ou...	7.8 High	—	0,10%	19 Jul 2026
CVE-2026-64027 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking (again) Recent commit changed the semantics from NOT_VALID to...	7.8 High	—	0,10%	19 Jul 2026
CVE-2026-64026 linux kernel In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg This improves the fix for C...	7.8 High	—	0,11%	19 Jul 2026
CVE-2026-64025 linux kernel In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx sk_psock_strp_data_ready() already checks...	9.8 Critical	—	0,37%	19 Jul 2026
CVE-2026-64024 linux kernel In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Blamed commit moved the TIME_WAIT-der...	9.4 Critical	—	0,31%	19 Jul 2026
CVE-2026-64023 linux kernel In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: fix a potential use-after-free On error we free aggr->lookups->dev_id before remov...	7.8 High	—	0,12%	19 Jul 2026
CVE-2026-64020 linux kernel In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma_vecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. T...	7.5 High	—	0,61%	19 Jul 2026
CVE-2026-64019 linux kernel In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iter...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64014 linux kernel In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size nexio_read_data() pulls data_l...	7.1 High	—	0,13%	19 Jul 2026
CVE-2026-64013 linux kernel In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee ("ACPI: button: Install n...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64012 linux kernel In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked When sfb has chil...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64018 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access In mana_hwc_rx_event_handler(),...	9.3 Critical	—	0,14%	19 Jul 2026
CVE-2026-64017 linux kernel In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable When submitting a bio to blk-mq, if the task should sleep...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64016 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbd_reop...	9.8 Critical	—	0,67%	19 Jul 2026
CVE-2026-64015 linux kernel In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carlini reports that the keyring code...	7.8 High	—	0,16%	19 Jul 2026
CVE-2026-64006 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix dst corruption in same register operation For lshift and rshift, the shift...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64011 linux kernel In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free in llcp_sock_release() llcp_sock_release() unconditionally unlinks the...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64010 linux kernel In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() A race condition exists in the NFC LLCP con...	8.8 High	—	0,20%	19 Jul 2026
CVE-2026-64009 linux kernel In the Linux kernel, the following vulnerability has been resolved: xfrm: Check for underflow in xfrm_state_mtu Leo Lin reported OOB write issue in esp component: xf...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-64008 linux kernel In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix UAF via dangling GEM handle in create_bo rocket_ioctl_create_bo() inserts a GEM ha...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-64007 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: refresh tcphdr after skb_ensure_writable synproxy_tstamp_adjust() rewrites the...	9.8 Critical	—	0,51%	19 Jul 2026
CVE-2026-64005 linux kernel In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables INIT_HLIST_HEAD(&smc_v*_hashinfo.ht) are called after s...	7.8 High	—	0,10%	19 Jul 2026
CVE-2026-64004 linux kernel In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix locking in .getsockopt Mirror iucv_sock_setsockopt() and wrap the whole switch in lock...	7.8 High	—	0,10%	19 Jul 2026
CVE-2026-63998 linux kernel In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnl_ops_complete() on module flash errors When validate() fails we are skipp...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-63997 linux kernel In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors module_flash_fw_schedule() is mis...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-63999 linux kernel In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure rss_prepare_get() allocates the indi...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64003 linux kernel In the Linux kernel, the following vulnerability has been resolved: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues While a SCSI host is i...	7.5 High	—	0,44%	19 Jul 2026
CVE-2026-64002 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() ipv4_sysctl_exi...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64001 linux kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error snd_pcm_oss_proc_write() links a newly alloca...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-64000 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervision frame handling Ensure the entire TLV header is lin...	9.8 Critical	—	0,49%	19 Jul 2026
CVE-2026-63996 linux kernel In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: require exact CDB reply length Malicious SFP module could respond with rpl_len longer...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63995 linux kernel In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: validate start_cmd_payload_size from module The CMIS firmware update code reads start...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63994 linux kernel In the Linux kernel, the following vulnerability has been resolved: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() Sashiko found that...	9.8 Critical	—	0,51%	19 Jul 2026
CVE-2026-63993 linux kernel In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() skb_tunnel_check_pmtu() can...	9.8 Critical	—	0,51%	19 Jul 2026
CVE-2026-63992 linux kernel In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() In some cases, iptunnel_pmtud...	9.1 Critical	—	0,51%	19 Jul 2026
CVE-2026-63991 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() The skb_clone() function can...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-63989 linux kernel In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in netlink path Since the introduction of the netlink configurat...	5.5 Medium	—	0,12%	19 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.