Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-98595
niedrig
kernel: udp: remove a disconnected socket from the 4-tuple hash tableBuild 07:11 UTC
CVE-2026-98594
niedrig
kernel: tg3: clean up PHYLIB resources on probe failureBuild 07:11 UTC
CVE-2026-98579
niedrig
kernel: nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failureBuild 07:11 UTC
CVE-2026-98553
niedrig
kernel: autofs: fix sbi->pipe file reference leak in autofs_kill_sb()Build 07:11 UTC
CVE-2026-98552
niedrig
kernel: perf/core: Fix a refcount leak in attach_perf_ctx_data()Build 07:11 UTC
CVE-2026-98551
niedrig
kernel: perf/core: Fill branch entries with a single assignmentBuild 07:11 UTC
CVE-2026-98542
niedrig
kernel: cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflictBuild 07:11 UTC
CVE-2026-98535
niedrig
kernel: fsl/fman: Fix clk reference leak in read_dts_node()Build 07:11 UTC
CVE-2026-98531
niedrig
kernel: ipv6: sr: enforce exact attribute length for SEG6_ATTR_DSTBuild 07:11 UTC
CVE-2026-98529
niedrig
kernel: gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()Build 07:11 UTC
CVE-2026-98528
niedrig
kernel: gpio: cdev: fix kernel stack leak to user-space in error pathBuild 07:11 UTC
CVE-2026-98527
niedrig
kernel: gpio: zynq: fix runtime PM leak on request error pathBuild 07:11 UTC
CVE-2026-98519
niedrig
kernel: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()Build 07:11 UTC
CVE-2026-98516
niedrig
kernel: drm/nouveau: Fix bridge reference leak in nv1a_ram_new()Build 07:11 UTC
CVE-2026-98514
niedrig
kernel: drm/nouveau: Fix gem reference leak in validate_init()Build 07:11 UTC
CVE-2026-98513
niedrig
kernel: drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()Build 07:11 UTC
CVE-2026-98509
niedrig
kernel: drm/virtio: fix memory leak of fence event on execbuffer failureBuild 07:11 UTC
CVE-2026-98505
niedrig
kernel: mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()Build 07:11 UTC
CVE-2026-98502
niedrig
kernel: HID: alps: unregister DualPoint Stick input device on removeBuild 07:11 UTC
CVE-2026-98498
niedrig
kernel: net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()Build 07:11 UTC
CVE-2026-98492
niedrig
kernel: net: macb: fix dma_alloc_coherent() leak on macb_alloc() error pathsBuild 07:11 UTC
CVE-2026-98486
niedrig
kernel: net: ena: fix MMIO read buffer leak on probe failureBuild 07:11 UTC
CVE-2026-98484
niedrig
kernel: netfilter: nf_tables: skip expired catchall elements on insert and deleteBuild 07:11 UTC
CVE-2026-98480
niedrig
kernel: nfc: trf7970a: power down on startup RX gain failureBuild 07:11 UTC
CVE-2026-98473
niedrig
kernel: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host configBuild 07:11 UTC
CVE-2026-98472
niedrig
kernel: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEVBuild 07:11 UTC
CVE-2026-98468
niedrig
kernel: KVM: arm64: Fix spurious warning for benign stage 2 teardown raceBuild 07:11 UTC
CVE-2026-98450
niedrig
kernel: smb: client: close completed creates on compound wait errorsBuild 07:11 UTC
CVE-2026-98448
niedrig
kernel: xfs: release orphanage dir inode if chown failsBuild 07:11 UTC
CVE-2026-98437
niedrig
kernel: media: qcom: iris: fix runtime PM reference leaksBuild 07:11 UTC
CVE-2026-98433
niedrig
kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failureBuild 07:11 UTC
CVE-2026-17591
niedrig
libarchive: libarchive: use-after-free via aliased Mac metadata copyBuild 07:11 UTC
CVE-2026-62438
niedrig
gimp: gimp: PAA integer overflow out-of-bounds readBuild 07:11 UTC
CVE-2026-84823
niedrig
org.wildfly.core: WildFly: Path traversal in take-snapshot discloses the server configuration to the Monitor roleBuild 07:11 UTC
CVE-2026-55467
niedrig
cups: cups: Denial of Service via unsanitized fax job attributesBuild 07:11 UTC
CVE-2026-77564
niedrig
Talos Linux: Support bundle does not redact registry credentialsBuild 07:11 UTC
CVE-2026-98431
niedrig
kernel: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependencyBuild 07:11 UTC
CVE-2026-98425
niedrig
kernel: wifi: mac80211: don't warn when an IBSS has no channel to scanBuild 07:11 UTC
CVE-2026-98424
niedrig
kernel: wifi: cfg80211: undo netns switch if renaming the wiphy failsBuild 07:11 UTC
CVE-2026-98422
niedrig
kernel: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdownBuild 07:11 UTC
CVE-2026-98421
niedrig
kernel: wifi: mac80211: require a peer station for TDLS setup confirmBuild 07:11 UTC
CVE-2026-98406
niedrig
kernel: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driverBuild 07:11 UTC
CVE-2026-98404
niedrig
kernel: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()Build 07:11 UTC
CVE-2026-98400
niedrig
kernel: s390/ipl: Fix NULL deref in kdump without re-IPL parm blockBuild 07:11 UTC
CVE-2026-98399
niedrig
kernel: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm blockBuild 07:11 UTC
CVE-2026-98388
niedrig
kernel: exec: do_close_on_exec() before taking exec_update_lockBuild 07:11 UTC
CVE-2026-98387
niedrig
kernel: s390/crypto: Fix skcipher_walk return code handling in aes_s390Build 07:11 UTC
CVE-2026-98386
niedrig
kernel: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slotBuild 07:11 UTC
CVE-2026-88842
niedrig
busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruptionBuild 07:11 UTC
CVE-2026-77205
niedrig
libreswan: Denial of Service via sending bogus X.509 certificatesBuild 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.