Katalog CVE (hal. 939)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.555 (Critical 36.782 · High 106.936 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 46.901–46.950 dari 267.555 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-63878 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO kvcalloc(args->num_entries, sizeof(*vm_entr...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-63877 linux kernel In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port...	5.5 Medium	—	0,17%	19 Jul 2026
CVE-2026-63876 linux kernel In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Prevent a crash from happening as the first serial port...	5.5 Medium	—	0,17%	19 Jul 2026
CVE-2026-63879 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpu_hmm_range_get_pages The notifier sequence must only be read once or otherwise...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-63875 linux kernel In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When huge_pmd_unshare() is called to unshare...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63873 linux kernel In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() aie2_populate_range() jumps bac...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-63874 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rx_retry cancellation It's possible that sequenc...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63868 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr The receive-side GARP attribute par...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-63862 linux kernel In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found In mtk_pcie_setup_irq(), the IRQ...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-63870 linux kernel In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() The aoe driver (or similar) generates...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63869 Advisory linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap When parsing the radiota...	7.6 High	—	0,26%	19 Jul 2026
CVE-2026-63867 linux kernel In the Linux kernel, the following vulnerability has been resolved: mptcp: close TOCTOU race while computing rcv_wnd The MPTCP output path access locklessly the MPTCP-l...	8.2 High	—	0,27%	19 Jul 2026
CVE-2026-63866 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link() Clear WCID pointer removing t...	8.8 High	—	0,38%	19 Jul 2026
CVE-2026-63865 linux kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks bpf_lsm_task_to_inode() i...	8.8 High	—	0,13%	19 Jul 2026
CVE-2026-63864 linux kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from visit_tailcall_insn Commit e40f5a6bf88a ("bpf: correct stack liveness for...	8.4 High	—	0,18%	19 Jul 2026
CVE-2026-63863 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() There is a unbalanced lock/unlock to gpusv...	8.8 High	—	0,13%	19 Jul 2026
CVE-2026-63861 linux kernel In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback mtk_snand_probe() regist...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-63859 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue() Similar to airoha_qdma_cleanup_rx_qu...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-63860 linux kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLA_NUL_STRING These attributes are evaluated as c-string (passed to strcmp), but...	8.4 High	—	0,18%	19 Jul 2026
CVE-2026-63858 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: add hook transactions for device deletions Restore the flag that indicates tha...	7.8 High	—	0,10%	19 Jul 2026
CVE-2026-63857 In the Linux kernel, the following vulnerability has been resolved: net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit() The transmit loop in ai...	9.8 Critical	—	0,67%	19 Jul 2026
CVE-2026-63856 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings VCN encoder and decoder rings do not su...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63855 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings VCN encoder and decoder rings do not su...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63854 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings VCN encoder and decoder rings do not su...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63853 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring VCN encoder and decoder rings do not support...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63852 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring VCN encoder and decoder rings do not suppo...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63851 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring VCN encoder and decoder rings do not suppo...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63850 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring VCN encoder and decoder rings do not suppo...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63849 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring VCN encoder and decoder rings do not suppo...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63848 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring JPEG rings do not support 64-bit user fence wr...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63847 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring JPEG rings do not support 64-bit user fence wr...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63846 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring JPEG rings do not support 64-bit user fence wr...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63845 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring JPEG rings do not support 64-bit user fence wr...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63844 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring JPEG rings do not support 64-bit user fence...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63843 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring JPEG rings do not support 64-bit user fence...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63842 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring JPEG rings do not support 64-bit user fence...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-63841 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring JPEG rings do not support 64-bit user fence...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63840 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring JPEG rings do not support 64-bit user fence...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-16221 openjsf fast-uri Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a literal backslash character (U+005C) a...	7.5 High	—	0,44%	19 Jul 2026
CVE-2026-63833 linux kernel In the Linux kernel, the following vulnerability has been resolved: ntfs3: reject direct userspace writes to reserved $LX* xattrs NTFS3 uses $LXUID, $LXGID, $LXMOD and...	7.1 High	—	0,14%	19 Jul 2026
CVE-2026-63832 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76_sta_add Since mt7925_mac_sta_add publishes wcid, add publ...	8.8 High	—	0,29%	19 Jul 2026
CVE-2026-63831 linux kernel In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() before in-place crypto llsec_do_encrypt_unauth(), llsec_do_encr...	8.8 High	—	0,31%	19 Jul 2026
CVE-2026-63830 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy across SG transforms The sk_msg sg.copy bitmap is part of the scatterli...	9.4 Critical	—	0,44%	19 Jul 2026
CVE-2026-63829 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates...	8.8 High	—	0,15%	19 Jul 2026
CVE-2026-63828 In the Linux kernel, the following vulnerability has been resolved: apparmor: mediate the implicit connect of TCP fast open sendmsg sendmsg()/sendto() with MSG_FASTOPEN...	8.4 High	—	0,17%	19 Jul 2026
CVE-2026-63827 In the Linux kernel, the following vulnerability has been resolved: apparmor: fix use-after-free in rawdata dedup loop aa_replace_profiles() walks ns->rawdata_list to d...	7.8 High	—	0,12%	19 Jul 2026
CVE-2026-63825 In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can mer...	9.8 Critical	—	0,86%	19 Jul 2026
CVE-2026-63824 Advisory linux kernel In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the internal output buffer is calcul...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63823 linux kernel In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payload in instantiate paths A: request_key() B: KEYCTL_INSTANTIATE...	7.8 High	—	0,16%	19 Jul 2026
CVE-2026-63819 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on f2fs_get_node_folio_ra() kernel BUG at fs/f2fs/file.c:845! Oops: inv...	7.8 High	—	0,13%	19 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.