Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-98291
mittel
kernel: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submitBuild 07:11 UTC
CVE-2026-98290
mittel
kernel: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanupBuild 07:11 UTC
CVE-2026-98288
mittel
kernel: net: stmmac: fix TSO header length truncationBuild 07:11 UTC
CVE-2026-98287
mittel
kernel: pppoatm: ensure a writable skb header and linear dataBuild 07:11 UTC
CVE-2026-98286
mittel
kernel: drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardownBuild 07:11 UTC
CVE-2026-98284
mittel
kernel: netlink: do not free nlk->groups while lockless readers can use itBuild 07:11 UTC
CVE-2026-98283
mittel
kernel: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()Build 07:11 UTC
CVE-2026-98282
mittel
kernel: powerpc/iommu: Fix the overflow validation in iommu_tce_check_iobaBuild 07:11 UTC
CVE-2026-98281
mittel
kernel: futex: Also allocate private hash on vfork()Build 07:11 UTC
CVE-2026-98280
mittel
kernel: drm/xe/i2c: Disable IRQ on unbindBuild 07:11 UTC
CVE-2026-98279
mittel
kernel: btrfs: handle lack of space when cleaning up verity itemsBuild 07:11 UTC
CVE-2026-98277
mittel
kernel: eth: fbnic: ring the doorbell if a burst ends in a dropBuild 07:11 UTC
CVE-2026-98276
mittel
kernel: net: lock the socket in sock_gettstamp()Build 07:11 UTC
CVE-2026-98275
mittel
In the Linux kernel, the following vulnerability has been resolved: n ...Build 07:11 UTC
CVE-2026-98274
mittel
In the Linux kernel, the following vulnerability has been resolved: n ...Build 07:11 UTC
CVE-2026-98273
mittel
kernel: x86/kprobes: Fix crash when probing CS CALL instructionsBuild 07:11 UTC
CVE-2026-98272
mittel
kernel: net: mvpp2: prevent buffer overflow in page_pool allocationBuild 07:11 UTC
CVE-2026-98271
mittel
kernel: net: skbuff: do not leave stale header offsets after pskb_carve()Build 07:11 UTC
CVE-2026-98269
mittel
kernel: btrfs: abort transaction on failure to update inode for hole punching and reflinkingBuild 07:11 UTC
CVE-2026-98267
mittel
kernel: 9p: Fix v9fs_issue_write() to update i_size and remote_i_sizeBuild 07:11 UTC
CVE-2026-98266
mittel
kernel: ALSA: core: Fix potential UAF after asynchronous card releaseBuild 07:11 UTC
CVE-2026-98265
mittel
kernel: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacityBuild 07:11 UTC
CVE-2026-98264
mittel
kernel: ALSA: virtio: reset device before deleting virtqueuesBuild 07:11 UTC
CVE-2026-98262
mittel
kernel: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLYBuild 07:11 UTC
CVE-2026-98261
mittel
kernel: cifs: Fix server use-after-free in cifs_chan_skip_or_disable()Build 07:11 UTC
CVE-2026-98258
mittel
kernel: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry listBuild 07:11 UTC
CVE-2026-98257
mittel
kernel: rds: ib: use rds_conn_drop() on protocol version mismatchBuild 07:11 UTC
CVE-2026-98255
mittel
kernel: tcp: exclude old ACKs from tcp fast pathBuild 07:11 UTC
CVE-2026-98254
mittel
kernel: swiotlb: use the adjusted address for the highmem page lookupBuild 07:11 UTC
CVE-2026-98253
mittel
kernel: RDMA/ucma: Serialize join and leave on copy_to_user failureBuild 07:11 UTC
CVE-2026-98252
mittel
kernel: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()Build 07:11 UTC
CVE-2026-98251
mittel
kernel: openvswitch: avoid reallocating confirmed conntrack labelsBuild 07:11 UTC
CVE-2026-98250
mittel
kernel: nfsd: fix handling of NFSEXP_PNFS in the netlink codepathBuild 07:11 UTC
CVE-2026-98249
mittel
kernel: arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvcBuild 07:11 UTC
CVE-2026-98248
mittel
kernel: arm64: percpu: Fix LSE operations on {8,16}-bit typesBuild 07:11 UTC
CVE-2026-98247
mittel
kernel: Bluetooth: hci_codec: validate vendor codec count lengthBuild 07:11 UTC
CVE-2026-98246
mittel
kernel: Bluetooth: hci_sync: Serialize local codec list cleanupBuild 07:11 UTC
CVE-2026-98245
mittel
kernel: btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()Build 07:11 UTC
CVE-2026-98244
mittel
kernel: btrfs: clear free space tree creation state on rebuild failureBuild 07:11 UTC
CVE-2026-98243
mittel
kernel: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3Build 07:11 UTC
CVE-2026-98242
mittel
kernel: dma-buf: Fix silent overflow for phys vec to sgtBuild 07:11 UTC
CVE-2026-98241
mittel
kernel: ipv6: xfrm: use full sockets in local error pathsBuild 07:11 UTC
CVE-2026-98239
mittel
kernel: net: lan743x: fix RX checksum use-after-freeBuild 07:11 UTC
CVE-2026-98238
mittel
kernel: net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()Build 07:11 UTC
CVE-2026-98236
mittel
kernel: net: wwan: mhi_wwan_mbim: check skb_copy_bits() return valueBuild 07:11 UTC
CVE-2026-98232
mittel
In the Linux kernel, the following vulnerability has been resolved: s ...Build 07:11 UTC
CVE-2026-98231
mittel
kernel: xfrm: serialize state GC with device state flushBuild 07:11 UTC
CVE-2026-98230
mittel
kernel: xfrm: use hlist_del_init_rcu for state_cache and state_cache_inputBuild 07:11 UTC
CVE-2026-98229
mittel
kernel: xfrm: save input state data before secpath resetsBuild 07:11 UTC
CVE-2026-98228
mittel
kernel: mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQBuild 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.