Katalog CVE (hal. 937)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.555 (Critical 36.782 · High 106.936 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 46.801–46.850 dari 267.555 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-63988 linux kernel In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in sysfs path Since the start of the git history, brport_store()...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-63990 linux kernel In the Linux kernel, the following vulnerability has been resolved: bonding: refuse to enslave CAN devices syzbot reported a kernel paging request crash in can_rx_unreg...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-63986 linux kernel In the Linux kernel, the following vulnerability has been resolved: ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure The goto err label leads to...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-63987 linux kernel In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES ethnl_update_profile() walks t...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63985 linux kernel In the Linux kernel, the following vulnerability has been resolved: ethtool: eeprom: add more safeties to EEPROM Netlink fallback The Netlink fallback path for reading...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63984 In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() ipv6_rpl_srh_decompress() computes:...	9.8 Critical	—	0,51%	19 Jul 2026
CVE-2026-63980 In the Linux kernel, the following vulnerability has been resolved: net/handshake: Use spin_lock_bh for hn_lock nvmet_tcp_state_change(), a socket callback that runs in...	7.5 High	—	0,34%	19 Jul 2026
CVE-2026-63979 In the Linux kernel, the following vulnerability has been resolved: net/handshake: hand off the pinned file reference to accept_doit handshake_req_next() removes the re...	9.8 Critical	—	0,64%	19 Jul 2026
CVE-2026-63978 In the Linux kernel, the following vulnerability has been resolved: net/handshake: Drain pending requests at net namespace exit The arguments to list_splice_init() in h...	9.8 Critical	—	0,49%	19 Jul 2026
CVE-2026-63977 In the Linux kernel, the following vulnerability has been resolved: dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work The change_work was introduced...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63976 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success l2cap_ecred_reconf_rsp() return...	8.8 High	—	0,57%	19 Jul 2026
CVE-2026-63975 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp If dcid is received for an already-assi...	8.8 High	—	0,27%	19 Jul 2026
CVE-2026-63974 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Since hci_dev_close_sync() can...	8.8 High	—	0,35%	19 Jul 2026
CVE-2026-63973 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: mana: Add NULL guards in teardown path to prevent panic on attach failure When queue allocation...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63972 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When mana_per_port_queue_reset_work_handle...	7.5 High	—	0,59%	19 Jul 2026
CVE-2026-63971 linux kernel In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctp_wait_for_connect and peeloff sctp_wait_for_connect() drops and re-acquir...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63970 linux kernel In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtio_transport_send_pkt_info() allocates or re...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63967 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer The tagged FIFO path declares iio_buff on...	7.8 High	—	0,16%	19 Jul 2026
CVE-2026-63966 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550_trigger_handler() declares the scan...	5.5 Medium	—	0,15%	19 Jul 2026
CVE-2026-63965 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix stack leak in bmp580 trigger handler bmp580_trigger_handler() declares it...	5.5 Medium	—	0,15%	19 Jul 2026
CVE-2026-63964 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images without a ':' record header do_flash() locates the fir...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63963 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers Properly validate the count p...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63962 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() svdm_consume_modes() ch...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63961 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Status Update VDO A broken/malicious...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63968 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_select_path() Found while auditing the same pattern Sashiko...	7.5 High	—	0,67%	19 Jul 2026
CVE-2026-63960 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() wcove_read_rx_buffer...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63959 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT A broken/malicious port can tr...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63958 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi_connector_change() The connector number in a UCS...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63957 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption with small endpoint Make sure that the bulk-out buff...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63956 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: fix memory corruption with small endpoint Make sure that the interrupt-out...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63953 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page When migrate_vma_insert_huge...	5.5 Medium	—	0,14%	19 Jul 2026
CVE-2026-63955 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: do not trigger BUG() on BH disabled context __get_vm_area_node() currently triggers a BU...	7.5 High	—	0,49%	19 Jul 2026
CVE-2026-63954 linux kernel In the Linux kernel, the following vulnerability has been resolved: hpfs: fix a crash if hpfs_map_dnode_bitmap fails If hpfs_map_dnode_bitmap fails, the code would call...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63949 linux kernel In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length message_store() linedisp_display() uncondition...	7.1 High	—	0,13%	19 Jul 2026
CVE-2026-63948 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn __set_chan_timer() takes a l2ca...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63952 linux kernel In the Linux kernel, the following vulnerability has been resolved: memfd: deny writeable mappings when implying SEAL_WRITE When SEAL_EXEC is added, SEAL_WRITE is impli...	8.4 High	—	0,13%	19 Jul 2026
CVE-2026-63951 linux kernel In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_writeback_endio A crash was observed in zram_writeback_endio due to...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63950 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one Initialize nr_pages to 1 at the...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63947 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: fix missing length checks in hidp_input_report() hidp_input_report() reads keyboard...	8.8 High	—	0,35%	19 Jul 2026
CVE-2026-63946 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_recv_frame iso_recv_frame reads conn->sk under iso_conn_lock but rele...	8.8 High	—	0,26%	19 Jul 2026
CVE-2026-63945 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock iso_sock_close() calls iso_sock_clea...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63943 linux kernel In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadone_process_packet() receives len direct...	7.1 High	—	0,16%	19 Jul 2026
CVE-2026-63936 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: adc: mt6359: fix unchecked return value in mt6358_read_imp In mt6358_read_imp(), the variable v...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63944 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync hci_le_create_cis_sync() dereferences conn->c...	8.8 High	—	0,33%	19 Jul 2026
CVE-2026-63942 linux kernel In the Linux kernel, the following vulnerability has been resolved: parport: Fix race between port and client registration The parport subsystem registers port devices...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63941 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor ZCR_EL2 can be updated by a VHE gue...	8.8 High	—	0,15%	19 Jul 2026
CVE-2026-63940 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' (...	9.3 Critical	—	0,19%	19 Jul 2026
CVE-2026-63939 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the in-GHCB scratch area When setting the length of the...	9.3 Critical	—	0,20%	19 Jul 2026
CVE-2026-63938 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the actual size of the buffer When processing Page State...	9.3 Critical	—	0,20%	19 Jul 2026
CVE-2026-63937 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer Use READ_ONCE() when reading...	8.8 High	—	0,14%	19 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.