Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-98770
mittel
kernel: usb: gadget: midi2: Fix the jack descriptor array sizesBuild 01:25 UTC
CVE-2026-98767
mittel
kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer countBuild 01:25 UTC
CVE-2026-98766
mittel
kernel: usb: gadget: aspeed-vhub: cancel wake work on device removalBuild 01:25 UTC
CVE-2026-98765
mittel
kernel: USB: gadget: dummy-hcd: Fix wait for outstanding request completionsBuild 01:25 UTC
CVE-2026-98764
mittel
kernel: usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESCBuild 01:25 UTC
CVE-2026-98763
mittel
kernel: usb: core: clear both ep_in and ep_out for non-ep0 control endpointsBuild 01:25 UTC
CVE-2026-98762
mittel
kernel: kernel: Denial of Service via use-after-free in USB DWC2 driverBuild 01:25 UTC
CVE-2026-98758
mittel
kernel: usb: typec: ucsi: glink: fix use-after-free of ucsi on removeBuild 01:25 UTC
CVE-2026-98757
mittel
kernel: usb: cdns3: fix use-after-free in cdns3_gadget_exit()Build 01:25 UTC
CVE-2026-98756
mittel
kernel: usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probeBuild 01:25 UTC
CVE-2026-98754
mittel
kernel: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanupBuild 01:25 UTC
CVE-2026-98752
mittel
kernel: tty: port: fix tty_port_tty_vhangup() raceBuild 01:25 UTC
CVE-2026-98751
mittel
kernel: tty: abort break signalling on hangupBuild 01:25 UTC
CVE-2026-98749
mittel
kernel: kernel: Denial of Service via use-after-free in MAX3100 serial driverBuild 01:25 UTC
CVE-2026-98748
mittel
kernel: kernel: Denial of Service via use-after-free in Broadcom serial driverBuild 01:25 UTC
CVE-2026-98747
mittel
kernel: serial: core: fix NULL pointer dereference in serial_core_unregister_port()Build 01:25 UTC
CVE-2026-98740
mittel
kernel: EDAC/altera: Drop __init from ECC setup paths for re-probe safetyBuild 01:25 UTC
CVE-2026-98738
mittel
kernel: kernel: denial of service via race condition in Bluetooth SMP remote OOB handlingBuild 01:25 UTC
CVE-2026-98737
mittel
kernel: kernel: Denial of service via Bluetooth inquiry cache use-after-freeBuild 01:25 UTC
CVE-2026-98735
mittel
kernel: Bluetooth: hci_core: Serialize ACL scheduling with channel deletionBuild 01:25 UTC
CVE-2026-98734
mittel
kernel: kernel: Denial of Service via use-after-free in Bluetooth connection schedulingBuild 01:25 UTC
CVE-2026-98730
mittel
kernel: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()Build 01:25 UTC
CVE-2026-98722
mittel
kernel: mtd: block2mtd: Fix divide error when erase_size is zeroBuild 01:25 UTC
CVE-2026-98721
mittel
kernel: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQBuild 01:25 UTC
CVE-2026-98720
mittel
kernel: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modifiedBuild 01:25 UTC
CVE-2026-98714
mittel
kernel: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeededBuild 01:25 UTC
CVE-2026-98713
mittel
kernel: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGTBuild 01:25 UTC
CVE-2026-98712
mittel
kernel: KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irqBuild 01:25 UTC
CVE-2026-98711
mittel
kernel: kernel: cw1200: Information disclosure via out-of-bounds read during frame transmissionBuild 01:25 UTC
CVE-2026-98708
mittel
kernel: kernel: mac80211: Denial of Service via use-after-free in channel context replacementBuild 01:25 UTC
CVE-2026-98707
mittel
kernel: wifi: mac80211: shut down RX BA session timer on teardownBuild 01:25 UTC
CVE-2026-98706
mittel
kernel: wifi: mac80211: drain PS delivery work during station teardownBuild 01:25 UTC
CVE-2026-98704
mittel
kernel: wifi: mac80211: keep fallback association elements aliveBuild 01:25 UTC
CVE-2026-98703
mittel
kernel: wifi: mac80211: minstrel_ht: validate fixed rate indexBuild 01:25 UTC
CVE-2026-98702
mittel
kernel: kernel: Denial of Service via invalid channel switch frame in mac80211Build 01:25 UTC
CVE-2026-98701
mittel
kernel: wifi: mac80211: release mesh path quota on failed additionsBuild 01:25 UTC
CVE-2026-98699
mittel
kernel: wifi: mac80211: fix mesh fast xmit path deletion UAFBuild 01:25 UTC
CVE-2026-98687
mittel
kernel: thunderbolt: Reject oversized XDomain properties responsesBuild 01:25 UTC
CVE-2026-98678
mittel
kernel: iio: adc: ad4030: fix invalid oversampling_ratio validationBuild 01:25 UTC
CVE-2026-98677
mittel
kernel: iio: adc: ad_sigma_delta: fix use-after-free on unbindBuild 01:25 UTC
CVE-2026-98676
mittel
kernel: iio: adc: ade9000: fix NULL pointer dereference in clkout registrationBuild 01:25 UTC
CVE-2026-98674
mittel
kernel: iio: adc: adi-axi-adc: Initialize state mutexBuild 01:25 UTC
CVE-2026-98673
mittel
kernel: iio: adc: pac1934: check ACPI label duplicationBuild 01:25 UTC
CVE-2026-98670
mittel
kernel: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbindBuild 01:25 UTC
CVE-2026-98669
mittel
kernel: iio: buffer: serialize buffer teardown with mode claimsBuild 01:25 UTC
CVE-2026-98667
mittel
kernel: iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_dataBuild 01:25 UTC
CVE-2026-98666
mittel
kernel: iio: gyro: adis16136: fix unprotected debugfs readsBuild 01:25 UTC
CVE-2026-98665
mittel
kernel: iio: health: max30102: fix NULL dereference in interrupt handlerBuild 01:25 UTC
CVE-2026-98664
mittel
kernel: iio: imu: adis16400: fix unprotected debugfs readsBuild 01:25 UTC
CVE-2026-98663
mittel
kernel: iio: imu: adis16480: fix unprotected debugfs readsBuild 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.