Katalog CVE (hal. 940)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.555 (Critical 36.782 · High 106.936 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 46.951–47.000 dari 267.555 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-63818 In the Linux kernel, the following vulnerability has been resolved: f2fs: validate orphan inode entry count f2fs_recover_orphan_inodes() trusts the orphan block entry_c...	8.4 High	—	0,14%	19 Jul 2026
CVE-2026-63817 In the Linux kernel, the following vulnerability has been resolved: f2fs: validate compress cache inode only when enabled F2FS_COMPRESS_INO() uses NM_I(sbi)->max_nid as...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63816 In the Linux kernel, the following vulnerability has been resolved: f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode - ioctl(F2FS_IOC_GARBAGE_COLLECT_RANGE)...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63815 In the Linux kernel, the following vulnerability has been resolved: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes When the flexible_inline_xattr feature i...	8.4 High	—	0,14%	19 Jul 2026
CVE-2026-63814 In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() f2fs_acl_count() only validates the aggregate...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63813 In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block" This reverts commit...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63812 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() When __destroy_extent_node() se...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63809 linux kernel In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced sysctl write buffer proc_sys_call_handler() allocates its temporary s...	7.8 High	—	0,15%	19 Jul 2026
CVE-2026-63808 linux kernel In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfat_find_dir_entry() In exfat_find_dir_entry(), the buffer_...	9.8 Critical	—	0,53%	19 Jul 2026
CVE-2026-63807 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepa...	8.8 High	—	0,17%	19 Jul 2026
CVE-2026-63806 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() Drop a BUG_ON()...	7.1 High	—	0,16%	19 Jul 2026
CVE-2026-63805 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix nx_crypto_ctx_exit argument nx_crypto_ctx_shash_exit calls nx_crypto_ctx_exit with...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63804 linux kernel In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2_qd_dealloc gfs2_qd_dealloc(), called as an RCU callback from gfs2_q...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63803 linux kernel In the Linux kernel, the following vulnerability has been resolved: hdlc_ppp: sync per-proto timers before freeing hdlc state Each PPP control protocol (LCP/IPCP/IPV6CP...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-63802 linux kernel In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in the same blkcg are released conc...	7.8 High	—	0,10%	19 Jul 2026
CVE-2026-63801 linux kernel In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done tipc_aead_decrypt() goes straight from...	8.8 High	—	0,51%	19 Jul 2026
CVE-2026-63800 linux kernel In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() When hitting the NFS_LAYOUT_RETURN branch in pnfs_u...	9.8 Critical	—	0,64%	19 Jul 2026
CVE-2026-63799 linux kernel In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in fixup path In mm_cid_fixup_cpus_to_tasks(...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-63798 linux kernel In the Linux kernel, the following vulnerability has been resolved: irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove The driver allocate...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-63797 linux kernel In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free on probe error path rpmsg_chrdev_probe() stores the newly allocated...	8.4 High	—	0,15%	19 Jul 2026
CVE-2026-63796 linux kernel In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject oversized group bitmap descriptors ocfs2_validate_gd_parent() only bounds bg_bits agai...	8.8 High	—	0,59%	19 Jul 2026
CVE-2026-63795 linux kernel In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() is called with clone s...	10.0 Critical	—	0,62%	19 Jul 2026
CVE-2026-63794 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path In sev_dbg_crypt(), the per-iteratio...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-63793 linux kernel In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol->volume_label with a mutex and snaphost the label...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-53403 linux kernel In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var info->var, a framebuffer...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-53402 linux kernel In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() When fbcon_do_set_font() fail...	7.1 High	—	0,17%	19 Jul 2026
CVE-2026-53401 linux kernel In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfb_mmap omapfb_mmap() has a race condition with OMAPFB_SETUP...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-53400 linux kernel In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using i2c_get_a...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-53399 linux kernel In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4_alloc_stid() publishes the new stid into cl->cl_s...	9.8 Critical	—	0,66%	19 Jul 2026
CVE-2026-53398 linux kernel In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo_no_name() currently initializes...	9.8 Critical	—	0,54%	19 Jul 2026
CVE-2026-53397 linux kernel In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak on SETACL decode failure nfsaclsvc_decode_setaclargs() and nfs3svc_decode_s...	7.5 High	—	0,53%	19 Jul 2026
CVE-2026-53396 linux kernel In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak and ignored error in nfsd4_create_file nfsd4_create_file() has two bugs in...	7.1 High	—	0,38%	19 Jul 2026
CVE-2026-53395 linux kernel In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4_create nfsd4_create() steals create->cr_dpacl/cr_pacl int...	7.5 High	—	0,49%	19 Jul 2026
CVE-2026-53394 linux kernel In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When find_or_alloc_open_stateo...	7.5 High	—	0,63%	19 Jul 2026
CVE-2026-53393 linux kernel In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsd_vfs_write() and nfsd_commit() both call...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-53392 linux kernel In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count ff_layout_alloc_lseg() decodes the filehandle-...	7.5 High	—	0,53%	19 Jul 2026
CVE-2026-53391 linux kernel In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr nfs4_decode_mp_ds_addr() decodes the...	7.5 High	—	0,52%	19 Jul 2026
CVE-2026-53390 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smb_check_perm_dacl() The permission-check ACE walk in smb_check_pe...	8.1 High	—	0,47%	19 Jul 2026
CVE-2026-53389 linux kernel In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in del_async path In tcp_ao_delete_key(), the del_async path s...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-53388 linux kernel In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on...	7.8 High	—	0,13%	19 Jul 2026
CVE-2026-53387 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml6075_it_ms has 5 elements but VEM...	7.1 High	—	0,13%	19 Jul 2026
CVE-2026-53386 linux kernel In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_settings index ads1298_pga_settings has 7 elements but...	7.8 High	—	0,18%	19 Jul 2026
CVE-2026-53385 linux kernel In the Linux kernel, the following vulnerability has been resolved: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write A KASAN null-ptr-deref w...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-53384 linux kernel In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_probe() registers the...	9.8 Critical	—	0,52%	19 Jul 2026
CVE-2026-53383 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2_check_user_session() takes a shortcu...	7.5 High	—	0,66%	19 Jul 2026
CVE-2026-53382 linux kernel In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si syzbot reported a general protection...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-53381 linux kernel In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called from fuse_release_end() can Oops if the super blo...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-53380 linux kernel In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of buffers (`rzv2h_ivc::buffers.queue`)...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-53379 linux kernel In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free control handler on error in ov8856_init_controls() The control handler wasn...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-53378 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property...	5.5 Medium	—	0,14%	19 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.