Katalog CVE (hal. 938)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.555 (Critical 36.782 · High 106.936 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 46.851–46.900 dari 267.555 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-63935 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: adc: nxp-sar-adc: fix division by zero in write_raw Add a validation check for the sampling fre...	5.5 Medium	—	0,14%	19 Jul 2026
CVE-2026-63934 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: gyro: itg3200: fix i2c read into the wrong stack location itg3200_read_all_channels() takes `__...	7.1 High	—	0,16%	19 Jul 2026
CVE-2026-63933 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16260: fix division by zero in write_raw Add a validation check for the sampling freq...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63932 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: chemical: mhz19b: reject oversized serial replies mhz19b_receive_buf() appends each serdev chun...	5.5 Medium	—	0,15%	19 Jul 2026
CVE-2026-63931 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: fix division by zero in write_raw Add a zero check for val2 before using it as...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63929 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() iio_buffer_enqueue_dmabuf() allocates...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63928 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63930 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in error path In the err_put_buffers cleanup path of ii...	7.8 High	—	0,16%	19 Jul 2026
CVE-2026-63927 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference "urb" after calling usb...	7.8 High	—	0,16%	19 Jul 2026
CVE-2026-63926 linux kernel In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data When bpf_msg_push_data() inserts data in...	8.4 High	—	0,19%	19 Jul 2026
CVE-2026-63925 linux kernel In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection at XPN lower-PN wrap In macsec_post_decrypt(), when pn is U32_MAX, pn...	8.1 High	—	0,35%	19 Jul 2026
CVE-2026-63924 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), w...	9.8 Critical	—	0,71%	19 Jul 2026
CVE-2026-63923 linux kernel In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify rvu_mbox_handler_rep_event_...	8.8 High	—	0,17%	19 Jul 2026
CVE-2026-63922 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) i...	9.8 Critical	—	0,71%	19 Jul 2026
CVE-2026-63921 linux kernel In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). After patch 1/2 in this series, vti6_update() un...	8.8 High	—	0,16%	19 Jul 2026
CVE-2026-63920 linux kernel In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6_datagram_recv_specific_ctl() build...	7.1 High	—	0,17%	19 Jul 2026
CVE-2026-63919 linux kernel In the Linux kernel, the following vulnerability has been resolved: xfrm: input: hold netns during deferred transport reinjection Transport-mode reinjection stores a st...	8.8 High	—	0,65%	19 Jul 2026
CVE-2026-63918 linux kernel In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname A reader in l2tp_session_get_by_ifname...	7.8 High	—	0,16%	19 Jul 2026
CVE-2026-63917 linux kernel In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_changelink(). ip netns add ns1 ip netns add ns2 ip -n ns1 link add...	8.8 High	—	0,17%	19 Jul 2026
CVE-2026-63916 linux kernel In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacom_hid_set_device_mode() wacom_hid_set_device_mode() currently assum...	8.8 High	—	0,36%	19 Jul 2026
CVE-2026-63915 linux kernel In the Linux kernel, the following vulnerability has been resolved: nfc: hci: fix out-of-bounds read in HCP header parsing Both nfc_hci_recv_from_llc() and nci_hci_data...	8.8 High	—	0,35%	19 Jul 2026
CVE-2026-63914 linux kernel In the Linux kernel, the following vulnerability has been resolved: xfrm: route MIGRATE notifications to caller's netns xfrm_send_migrate() in net/xfrm/xfrm_user.c and...	7.3 High	—	0,15%	19 Jul 2026
CVE-2026-63913 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An unintend...	8.2 High	—	0,97%	19 Jul 2026
CVE-2026-63912 linux kernel In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate The ESP out-of-place fast path appends the trail...	9.8 Critical	—	0,71%	19 Jul 2026
CVE-2026-63908 linux kernel In the Linux kernel, the following vulnerability has been resolved: Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem When a configuration file provides a...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63907 linux kernel In the Linux kernel, the following vulnerability has been resolved: uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory uio_pci_sva allocates struct uio_...	7.8 High	—	0,15%	19 Jul 2026
CVE-2026-63905 linux kernel In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: Fix use after free bug in vudc_remove due to race condition This patch follows up Zheng...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63904 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: check URB actual_length for interrupt-IN notifications USBTMC devices can use an option...	7.1 High	—	0,17%	19 Jul 2026
CVE-2026-63903 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkin_sa: validate interrupt status length The Belkin interrupt callback treats interr...	7.1 High	—	0,17%	19 Jul 2026
CVE-2026-63911 linux kernel In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: reset runtime state when cloning SAs iptfs_clone_state() clones the IPTFS mode data wit...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63910 linux kernel In the Linux kernel, the following vulnerability has been resolved: dma-buf: fix UAF in dma_buf_fd() tracepoint Once FD_ADD() returns, the fd is live in the file descri...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63909 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops Commit d07b26f39246 ("ksmbd: requ...	8.1 High	—	0,63%	19 Jul 2026
CVE-2026-63906 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2430_probe() In omap2430_probe(), of_node_put(np) is...	8.4 High	—	0,18%	19 Jul 2026
CVE-2026-63902 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: validate interrupt packet headers cypress_read_int_callback() parses the in...	7.1 High	—	0,17%	19 Jul 2026
CVE-2026-63901 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix memory corruption with small endpoints Add the missing bulk-out bu...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63900 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the si...	5.5 Medium	—	0,17%	19 Jul 2026
CVE-2026-63899 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63898 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix memory corruption with small endpoint The driver overrides the maximum tr...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63897 linux kernel In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check Add the missing sanity check o...	5.5 Medium	—	0,17%	19 Jul 2026
CVE-2026-63894 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: serialize DMABUF cancel against request completion ffs_epfile_dmabuf_io_complete(...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63893 linux kernel In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() entry->value is u32 and entry->l...	8.1 High	—	0,39%	19 Jul 2026
CVE-2026-63889 linux kernel In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 An adjacent Fibre Channel fabric act...	8.1 High	—	0,36%	19 Jul 2026
CVE-2026-63880 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO The AMDGPU_GEM_OP_GET_MAPPING_...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-63888 linux kernel In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() Two latent bugs in...	9.8 Critical	—	0,78%	19 Jul 2026
CVE-2026-63887 linux kernel In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf iscsi_encode_text_output()...	9.8 Critical	—	0,78%	19 Jul 2026
CVE-2026-63886 linux kernel In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate CHAP_R length before base64 decode chap_server_compute_hash() allocate...	9.8 Critical	—	0,71%	19 Jul 2026
CVE-2026-63885 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/gem: fix race between change_handle and handle_delete drm_gem_change_handle_ioctl leaves the old...	8.8 High	—	0,13%	19 Jul 2026
CVE-2026-63884 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential UAF in TTM object purge TLDR: The bo->ttm object might be changed by calling...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63883 In the Linux kernel, the following vulnerability has been resolved: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ When uart_flush_buffer...	7.3 High	—	0,17%	19 Jul 2026
CVE-2026-63881 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger get_queue_ids() computes array_s...	7.8 High	—	0,19%	19 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.