Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-98693
mittel
kernel: thunderbolt: Hold a router reference for each allocated HopIDBuild 07:11 UTC
CVE-2026-98689
mittel
kernel: thunderbolt: Don't access a DP tunnel after its DPRX read was canceledBuild 07:11 UTC
CVE-2026-98688
mittel
kernel: thunderbolt: Fix NULL dereference in tb_remove_work()Build 07:11 UTC
CVE-2026-98681
mittel
kernel: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW racesBuild 07:11 UTC
CVE-2026-98672
mittel
kernel: iio: adc: stm32-adc: fix possible division by zero in processed channelBuild 07:11 UTC
CVE-2026-98662
mittel
kernel: kernel: Denial of Service via use-after-free during gp2ap020a00f device removalBuild 07:11 UTC
CVE-2026-98653
mittel
kernel: KVM: s390: Fix _gaccess_shadow_fault()Build 07:11 UTC
CVE-2026-98651
mittel
kernel: KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()Build 07:11 UTC
CVE-2026-98650
mittel
kernel: KVM: s390: Fix potential races in dat skey functionsBuild 07:11 UTC
CVE-2026-98649
mittel
kernel: KVM: s390: Fix race in _destroy_pages_crste()Build 07:11 UTC
CVE-2026-98648
mittel
kernel: s390/uv: Prevent potential out-of-bounds readBuild 07:11 UTC
CVE-2026-98646
mittel
kernel: tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF contextBuild 07:11 UTC
CVE-2026-98644
mittel
kernel: bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()Build 07:11 UTC
CVE-2026-98640
mittel
kernel: HID: amd_sfh: Validate PCI BAR size before mappingBuild 07:11 UTC
CVE-2026-98637
mittel
kernel: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failureBuild 07:11 UTC
CVE-2026-98635
mittel
kernel: scsi: block: Fix zones_cond out-of-bounds write on zone reportBuild 07:11 UTC
CVE-2026-98634
mittel
kernel: scsi: sd_zbc: Reject disks with too many zonesBuild 07:11 UTC
CVE-2026-98631
mittel
kernel: xsk: Use a 32-bit compare in xsk_map_gen_lookupBuild 07:11 UTC
CVE-2026-98630
mittel
kernel: eth: fbnic: Fix payload page pool error cleanupBuild 07:11 UTC
CVE-2026-98622
mittel
kernel: net/sched: act_ct: don't WARN on benign flow_offload_alloc() failureBuild 07:11 UTC
CVE-2026-98613
mittel
kernel: bpf: Bound ownership depth through local kptrs and graph rootsBuild 07:11 UTC
CVE-2026-98612
mittel
kernel: net: usb: catc: bound the RX packet length in catc_rx_done()Build 07:11 UTC
CVE-2026-98611
mittel
kernel: bpf: Check params size before reading reserved fieldsBuild 07:11 UTC
CVE-2026-98610
mittel
kernel: net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budgetBuild 07:11 UTC
CVE-2026-98606
mittel
kernel: drm/virtio: release the GEM object on virtio_gpu_vram_create() errorsBuild 07:11 UTC
CVE-2026-98605
mittel
kernel: drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attachBuild 07:11 UTC
CVE-2026-98601
mittel
kernel: Bluetooth: btintel_pcie: validate device-supplied DMA indicesBuild 07:11 UTC
CVE-2026-98598
mittel
kernel: ipv6: Prevent rt6_insert_exception() for dying fib6_infoBuild 07:11 UTC
CVE-2026-98597
mittel
kernel: net: usb: sr9700: include receive overhead in the length checkBuild 07:11 UTC
CVE-2026-98596
mittel
kernel: ipv6: Fix dst leak for uncached routesBuild 07:11 UTC
CVE-2026-98592
mittel
kernel: net: spacemit: clear TX descriptor on fragment mapping failureBuild 07:11 UTC
CVE-2026-98591
mittel
kernel: bpf: Fix bounds check for skb-backed dynptrsBuild 07:11 UTC
CVE-2026-98588
mittel
kernel: bpf, sockmap: Reject max_entries > INT_MAX in sock_map_allocBuild 07:11 UTC
CVE-2026-98585
mittel
kernel: eth: fbnic: Avoid rounding zero ring sizesBuild 07:11 UTC
CVE-2026-98582
mittel
kernel: nfc: st21nfca: validate received frame sizeBuild 07:11 UTC
CVE-2026-98581
mittel
kernel: nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()Build 07:11 UTC
CVE-2026-98580
mittel
kernel: nfc: llcp: Fix race condition in accept_queue lifecycleBuild 07:11 UTC
CVE-2026-98577
mittel
kernel: nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()Build 07:11 UTC
CVE-2026-98575
mittel
kernel: nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()Build 07:11 UTC
CVE-2026-98569
mittel
kernel: ip_gre: Reject enabling collect metadata through changelinkBuild 07:11 UTC
CVE-2026-98567
mittel
kernel: net: xps: reject an out of range traffic classBuild 07:11 UTC
CVE-2026-98561
mittel
kernel: nfp: hold IPsec RX state under the XArray lockBuild 07:11 UTC
CVE-2026-98558
mittel
kernel: net: flush skb_defer_nodes in dev_cpu_dead()Build 07:11 UTC
CVE-2026-98556
mittel
kernel: gve: DQO: reject TSO packets with an out of range MSSBuild 07:11 UTC
CVE-2026-98555
mittel
kernel: llc: fix skb UAF and leaks on llc_mac_hdr_init() failureBuild 07:11 UTC
CVE-2026-98554
mittel
kernel: vlan: ensure sufficient headroom in vlan_dev_hard_header()Build 07:11 UTC
CVE-2026-98549
mittel
kernel: tcp: prevent collapsing skbs across boundary in rtx queueBuild 07:11 UTC
CVE-2026-98547
mittel
kernel: af_packet: fix integer overflow in prb_calc_retire_blk_tmo()Build 07:11 UTC
CVE-2026-98546
mittel
kernel: arm64/boot: Disable trapping of PMZR_EL0 writes to EL2Build 07:11 UTC
CVE-2026-98545
mittel
kernel: ata: libata-scsi: bound the ATA passthru sense descriptor writesBuild 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.