Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-98859
mittel
kernel: kernel: Denial of service via use-after-free in HID multitouch driverBuild 07:11 UTC
CVE-2026-98852
mittel
kernel: net: extend IPv6 exthdr detection of tunneled packetsBuild 07:11 UTC
CVE-2026-98850
mittel
kernel: net/packet: prevent TX_RING byte count overflowBuild 07:11 UTC
CVE-2026-98849
mittel
kernel: pfcp: fix socket lifetime on netdevice registration failureBuild 07:11 UTC
CVE-2026-98847
mittel
kernel: rtc: spear: initialize IRQ state before requesting alarm IRQBuild 07:11 UTC
CVE-2026-98843
mittel
kernel: netfs: zero gaps in read-gaps folio to avoid writing back stale dataBuild 07:11 UTC
CVE-2026-98840
mittel
kernel: kernel: Denial of Service via use-after-free in virtual console screen driverBuild 07:11 UTC
CVE-2026-98838
mittel
kernel: vt: skip screen update for DEC alignment test on backgroup consolesBuild 07:11 UTC
CVE-2026-98830
mittel
kernel: kernel: Denial of Service via buffer overflow in WFx Wi-Fi driverBuild 07:11 UTC
CVE-2026-98828
mittel
kernel: wifi: ath9k: reject short WMI command responsesBuild 07:11 UTC
CVE-2026-98822
mittel
kernel: wifi: mac80211: prevent AP VLAN tx from other interfacesBuild 07:11 UTC
CVE-2026-98821
mittel
kernel: block: reject polled dio with user integrity metadataBuild 07:11 UTC
CVE-2026-98816
mittel
kernel: bpf: Fix overflow of jump offset in constant blindingBuild 07:11 UTC
CVE-2026-98812
mittel
kernel: net/mctp: publish the mctp_dev only after it is initialisedBuild 07:11 UTC
CVE-2026-98810
mittel
kernel: wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()Build 07:11 UTC
CVE-2026-98808
mittel
kernel: net: systemport: Fix buffer overflow in bcm_sysport_get_stats()Build 07:11 UTC
CVE-2026-98806
mittel
kernel: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabledBuild 07:11 UTC
CVE-2026-98801
mittel
kernel: kernel: Denial of Service via improper socket memory reservation handlingBuild 07:11 UTC
CVE-2026-98789
mittel
kernel: bpf: Fix objects stuck in free_by_rcu_ttraceBuild 07:11 UTC
CVE-2026-98785
mittel
kernel: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspendBuild 07:11 UTC
CVE-2026-98778
mittel
kernel: binder: fix is_failure flag for superseded transaction cleanupBuild 07:11 UTC
CVE-2026-98775
mittel
kernel: nitro_enclaves: fix use-after-free on SLOT_ALLOC failureBuild 07:11 UTC
CVE-2026-98773
mittel
kernel: USB: cdc-acm: skip URB restart in port_shutdown if disconnectedBuild 07:11 UTC
CVE-2026-98772
mittel
kernel: USB: serial: fix port tear down use-after-freeBuild 07:11 UTC
CVE-2026-98768
mittel
kernel: kernel: Denial of Service via race condition during ANX7411 driver removalBuild 07:11 UTC
CVE-2026-98761
mittel
kernel: usb: typec: tcpm: recover after failure to start the frs amsBuild 07:11 UTC
CVE-2026-98760
mittel
kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()Build 07:11 UTC
CVE-2026-98759
mittel
kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()Build 07:11 UTC
CVE-2026-98753
mittel
kernel: tty: tty_port: restore TTY_IO_ERROR on activation failureBuild 07:11 UTC
CVE-2026-98750
mittel
kernel: kernel: use-after-free via race condition in TTY device registrationBuild 07:11 UTC
CVE-2026-98745
mittel
kernel: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systemsBuild 07:11 UTC
CVE-2026-98744
mittel
kernel: ASoC: codecs: max98363: fix uninitialized stream_config->typeBuild 07:11 UTC
CVE-2026-98743
mittel
kernel: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->typeBuild 07:11 UTC
CVE-2026-98739
mittel
kernel: Bluetooth: RFCOMM: Fix initial port reference raceBuild 07:11 UTC
CVE-2026-98736
mittel
kernel: Bluetooth: hci_conn: Lock parent access during enhanced SCO setupBuild 07:11 UTC
CVE-2026-98733
mittel
kernel: kernel: Denial of Service via use-after-free in Bluetooth ISO packet queueingBuild 07:11 UTC
CVE-2026-98731
mittel
kernel: Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()Build 07:11 UTC
CVE-2026-98729
mittel
kernel: x86/mm: Don't apply va_align to hugetlb mappings on AMD F15hBuild 07:11 UTC
CVE-2026-98727
mittel
kernel: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is knownBuild 07:11 UTC
CVE-2026-98726
mittel
kernel: nvme-multipath: fix underflow in ANA log bounds checksBuild 07:11 UTC
CVE-2026-98724
mittel
kernel: nvmet: pci-epf: reject too-short SGL segmentsBuild 07:11 UTC
CVE-2026-98723
mittel
kernel: nvmet: copy the hostid into the ctrl before creating PR pc_refsBuild 07:11 UTC
CVE-2026-98719
mittel
kernel: KVM: SEV: Nullify "have run CPUs" mask pointer when freeing itBuild 07:11 UTC
CVE-2026-98717
mittel
kernel: KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummyBuild 07:11 UTC
CVE-2026-98709
mittel
kernel: kernel: mac80211: Denial of Service via use-after-free during channel switchingBuild 07:11 UTC
CVE-2026-98705
mittel
kernel: wifi: mac80211: account proxy paths against the mesh path limitBuild 07:11 UTC
CVE-2026-98698
mittel
kernel: wifi: mac80211: handle empty FILS association request payloadBuild 07:11 UTC
CVE-2026-98696
mittel
kernel: USB: serial: fix driver deregistration orderBuild 07:11 UTC
CVE-2026-98695
mittel
kernel: USB: serial: fix ioctl hangup raceBuild 07:11 UTC
CVE-2026-98694
mittel
kernel: thunderbolt: Fix KASAN reported use-after-free when request is canceledBuild 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.