Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-98543
mittel
kernel: bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdirBuild 07:11 UTC
CVE-2026-98541
mittel
kernel: fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECTBuild 07:11 UTC
CVE-2026-98538
mittel
kernel: writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodesBuild 07:11 UTC
CVE-2026-98537
mittel
kernel: workqueue: Fix NULL current_pwq deref in flush dependency checkBuild 07:11 UTC
CVE-2026-98536
mittel
kernel: writeback: report a Tasks-RCU quiescent state per cgwb drain passBuild 07:11 UTC
CVE-2026-98526
mittel
kernel: llc: reserve device headroom for allocated framesBuild 07:11 UTC
CVE-2026-98525
mittel
kernel: mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()Build 07:11 UTC
CVE-2026-98522
mittel
kernel: drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()Build 07:11 UTC
CVE-2026-98521
mittel
kernel: drm/i915: fix incorrect RCU teardown orderBuild 07:11 UTC
CVE-2026-98518
mittel
kernel: drm/nouveau/dmem: pin VRAM for the whole registered rangeBuild 07:11 UTC
CVE-2026-98517
mittel
kernel: drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEMBuild 07:11 UTC
CVE-2026-98515
mittel
kernel: drm/nouveau: fix double-free in nvif_vmm_dtorBuild 07:11 UTC
CVE-2026-98512
mittel
kernel: drm/nouveau: RCU-free the scheduler-containing nouveau_schedBuild 07:11 UTC
CVE-2026-98511
mittel
kernel: drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()Build 07:11 UTC
CVE-2026-98510
mittel
kernel: drm/xe/vm: nuke PTs only after unlinking contested VMAsBuild 07:11 UTC
CVE-2026-98508
mittel
kernel: drm/virtio: fix NULL pointer dereference on fence allocation failureBuild 07:11 UTC
CVE-2026-98507
mittel
kernel: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publishBuild 07:11 UTC
CVE-2026-98506
mittel
kernel: mm/hugetlb: do not dissolve gigantic pages without runtime supportBuild 07:11 UTC
CVE-2026-98501
mittel
kernel: HID: alps: fix use-after-free on input2 registration failureBuild 07:11 UTC
CVE-2026-98499
mittel
kernel: HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()Build 07:11 UTC
CVE-2026-98497
mittel
kernel: net/mlx5e: fix swapped IPv6 IPsec policy masksBuild 07:11 UTC
CVE-2026-98495
mittel
kernel: net: arp: terminate device name before lookupBuild 07:11 UTC
CVE-2026-98494
mittel
kernel: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean readBuild 07:11 UTC
CVE-2026-98489
mittel
kernel: net: atl1c: fix soft lockup on out-of-range tpd_cons readBuild 07:11 UTC
CVE-2026-98488
mittel
kernel: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean readBuild 07:11 UTC
CVE-2026-98487
mittel
kernel: net: bridge: mdb: restart port group walk after deletionBuild 07:11 UTC
CVE-2026-98485
mittel
kernel: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds readBuild 07:11 UTC
CVE-2026-98482
mittel
kernel: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()Build 07:11 UTC
CVE-2026-98481
mittel
kernel: nfc: port100: reject frames whose declared length exceeds the received dataBuild 07:11 UTC
CVE-2026-98479
mittel
kernel: scsi: libiscsi_tcp: Check the data direction of a Data-In PDUBuild 07:11 UTC
CVE-2026-98478
mittel
kernel: scsi: ufs: core: Keep internal commands dispatchable during error handlingBuild 07:11 UTC
CVE-2026-98477
mittel
kernel: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()Build 07:11 UTC
CVE-2026-98476
mittel
kernel: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()Build 07:11 UTC
CVE-2026-98475
mittel
kernel: s390/cmf: Fix virtual vs physical address confusionBuild 07:11 UTC
CVE-2026-98471
mittel
kernel: KVM: SEV: Do cache maintenance on the source VM during intra-host migrationBuild 07:11 UTC
CVE-2026-98470
mittel
kernel: KVM: arm64: Don't WARN on an unknown VM ioctl in protected modeBuild 07:11 UTC
CVE-2026-98469
mittel
kernel: KVM: arm64: Fix AArch32 DBGBXVR<n> handlingBuild 07:11 UTC
CVE-2026-98467
mittel
kernel: KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown raceBuild 07:11 UTC
CVE-2026-98465
mittel
kernel: RISC-V: KVM: Serialize IMSIC attributes with vCPU migrationBuild 07:11 UTC
CVE-2026-98464
mittel
kernel: RISC-V: KVM: Synchronize hrtimer callback during teardownBuild 07:11 UTC
CVE-2026-98461
mittel
kernel: Bluetooth: hci_sock: validate event length before filteringBuild 07:11 UTC
CVE-2026-98460
mittel
kernel: Bluetooth: hci_sock: reject out-of-range OCF valuesBuild 07:11 UTC
CVE-2026-98455
mittel
kernel: Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFOBuild 07:11 UTC
CVE-2026-98454
mittel
kernel: smb: client: fix create context out-of-bounds readsBuild 07:11 UTC
CVE-2026-98453
mittel
kernel: smb: client: close handle after create-context parsing failureBuild 07:11 UTC
CVE-2026-98452
mittel
kernel: smb: client: clean up failed cached directory opensBuild 07:11 UTC
CVE-2026-98445
mittel
kernel: xfs: don't let memory failures leak blocks and kill repairsBuild 07:11 UTC
CVE-2026-98443
mittel
kernel: xfs: fix cursor and pointer handling when recovering iunlink bucketsBuild 07:11 UTC
CVE-2026-98436
mittel
In the Linux kernel, the following vulnerability has been resolved: a ...Build 07:11 UTC
CVE-2026-98434
mittel
kernel: sysctl: Check range in proc_dointvec_ms_jiffies_minmaxBuild 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.