Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-98660
mittel
kernel: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookupBuild 01:25 UTC
CVE-2026-98658
mittel
kernel: iio: proximity: aw96103: validate firmware data lengthBuild 01:25 UTC
CVE-2026-98657
mittel
kernel: iio: proximity: pulsedlight: fix iio_device left registered on PM setup failureBuild 01:25 UTC
CVE-2026-98656
mittel
kernel: iio: trigger: cancel reenable_work before freeing triggerBuild 01:25 UTC
CVE-2026-98652
mittel
kernel: KVM: s390: Add missing srcu in kvm_s390_set_irq_state()Build 01:25 UTC
CVE-2026-98647
mittel
kernel: bpf: Fix divide-by-zero in btf_struct_walk()Build 01:25 UTC
CVE-2026-98645
mittel
kernel: HID: winwing: fix use-after-free in force feedback teardownBuild 01:25 UTC
CVE-2026-98642
mittel
kernel: bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulkBuild 01:25 UTC
CVE-2026-98641
mittel
kernel: bpf, arm64: set up the frame pointer for the exception callbackBuild 01:25 UTC
CVE-2026-98638
mittel
kernel: KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()Build 01:25 UTC
CVE-2026-98636
mittel
kernel: squashfs: Add dictionary size range check to prevent shift-out-of-boundsBuild 01:25 UTC
CVE-2026-98632
mittel
kernel: Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancelBuild 01:25 UTC
CVE-2026-98627
mittel
kernel: bpf: Preserve packet pointer class displacement in regsafe()Build 01:25 UTC
CVE-2026-98626
mittel
kernel: bpf: Restrict CO-RE poisoning to relocatable instructionsBuild 01:25 UTC
CVE-2026-98625
mittel
kernel: netfilter: flowtable: publish HW_DEAD after worker is doneBuild 01:25 UTC
CVE-2026-98624
mittel
kernel: netfilter: nfnetlink_queue: hold nfnl mutex in event notifierBuild 01:25 UTC
CVE-2026-98623
mittel
kernel: drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_updateBuild 01:25 UTC
CVE-2026-98620
mittel
kernel: net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failureBuild 01:25 UTC
CVE-2026-98619
mittel
kernel: net: ethtool: keep rtnl_lock for the ioctl self testBuild 01:25 UTC
CVE-2026-98618
mittel
kernel: eth: fbnic: Handle maximum standalone channelsBuild 01:25 UTC
CVE-2026-98617
mittel
kernel: eth: fbnic: use the Rx queue napi pointer to find the napi vectorBuild 01:25 UTC
CVE-2026-98616
mittel
kernel: eth: fbnic: reset num_napi when the napi vectors are freedBuild 01:25 UTC
CVE-2026-98615
mittel
kernel: eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailboxBuild 01:25 UTC
CVE-2026-98602
mittel
kernel: Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthroughBuild 01:25 UTC
CVE-2026-98600
mittel
kernel: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()Build 01:25 UTC
CVE-2026-98599
mittel
kernel: bpf: Reject non-negative offsets in stack_slot_obj_get_spi()Build 01:25 UTC
CVE-2026-98593
mittel
kernel: s390/debug: Fix NULL pointer dereference in debug_info_copy()Build 01:25 UTC
CVE-2026-98590
mittel
kernel: bpf: Fix bpf_sock context code generationBuild 01:25 UTC
CVE-2026-98589
mittel
kernel: bpf: Reject pkt arguments in mutating subprogsBuild 01:25 UTC
CVE-2026-98587
mittel
kernel: firewire: cdev: fix back-transition for iso_resource_auto client resourceBuild 01:25 UTC
CVE-2026-98586
mittel
kernel: sctp: hold asoc or transport before mod_timer() in timer handlersBuild 01:25 UTC
CVE-2026-98583
mittel
kernel: nfc: nfcmrvl: validate helper command length before pullBuild 01:25 UTC
CVE-2026-98578
mittel
kernel: nfc: st21nfca: validate ISO15693 inventory lengthBuild 01:25 UTC
CVE-2026-98576
mittel
kernel: nfc: llcp: fix slab-out-of-bounds reads when logging service namesBuild 01:25 UTC
CVE-2026-98574
mittel
kernel: net: bcmgenet: stop Tx NAPI before disabling the queuesBuild 01:25 UTC
CVE-2026-98572
mittel
kernel: bpf: Fix immediate JMP JEQ/JNE on MIPS32Build 01:25 UTC
CVE-2026-98571
mittel
kernel: net: stmmac: clear stale buf->page after recycling on skb build failureBuild 01:25 UTC
CVE-2026-98570
mittel
kernel: net: ipv6: keep room for the mac header in dst_dev_overhead()Build 01:25 UTC
CVE-2026-98568
mittel
kernel: vxlan: use one headroom snapshot for neighbour repliesBuild 01:25 UTC
CVE-2026-98566
mittel
kernel: drm/imagination: clamp freelist reconstruction requestsBuild 01:25 UTC
CVE-2026-98565
mittel
kernel: net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621Build 01:25 UTC
CVE-2026-98564
mittel
kernel: net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irqBuild 01:25 UTC
CVE-2026-98563
mittel
kernel: net: phylink: record the PHY only once bringup cannot failBuild 01:25 UTC
CVE-2026-98562
mittel
kernel: net: libwx: fix races in Tx timestamp handlingBuild 01:25 UTC
CVE-2026-98559
mittel
kernel: net/smc: fix UAF on lgr list traversal in smcr_port_err()Build 01:25 UTC
CVE-2026-98557
mittel
kernel: gve: DQO: fix header length used by gve_can_send_tso() for UDP GSOBuild 01:25 UTC
CVE-2026-98544
mittel
kernel: bna: prevent IOC timer rearm during teardownBuild 01:25 UTC
CVE-2026-98540
mittel
kernel: fprobe: Terminate the fgraph_data list when the reservation is not filledBuild 01:25 UTC
CVE-2026-98539
mittel
kernel: fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" sagaBuild 01:25 UTC
CVE-2026-98534
mittel
kernel: ipe: fix use-after-free when auditing a newly loaded policyBuild 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.