Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-98533
mittel
kernel: ipe: protect the dm-verity root hash with RCUBuild 01:25 UTC
CVE-2026-98530
mittel
kernel: kprobes: Fix permanent hang when flushing the kprobe optimizerBuild 01:25 UTC
CVE-2026-98523
mittel
kernel: drm/client: fix restore of partially initialized clientBuild 01:25 UTC
CVE-2026-98520
mittel
kernel: drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mappingBuild 01:25 UTC
CVE-2026-98504
mittel
kernel: PCI: of_property: Omit bus properties without a subordinate busBuild 01:25 UTC
CVE-2026-98503
mittel
kernel: packet: use ubuf_info completion for TX_RING packetsBuild 01:25 UTC
CVE-2026-98500
mittel
kernel: HID: hid-oxp: use cancel_delayed_work_sync() in removeBuild 01:25 UTC
CVE-2026-98496
mittel
kernel: net: airoha: npu: cancel wdt_work after releasing the WDT IRQBuild 01:25 UTC
CVE-2026-98493
mittel
kernel: net: ipconfig: bound DHCP option constructionBuild 01:25 UTC
CVE-2026-98491
mittel
kernel: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entryBuild 01:25 UTC
CVE-2026-98483
mittel
kernel: nfc: fix use-after-free in nfc_get_local_general_bytesBuild 01:25 UTC
CVE-2026-98474
mittel
kernel: s390/pci: Fix missing device lock in zpci_report_status()Build 01:25 UTC
CVE-2026-98463
mittel
kernel: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flagsBuild 01:25 UTC
CVE-2026-98462
mittel
kernel: Bluetooth: hci_conn: fix CIS hold ownership on reuseBuild 01:25 UTC
CVE-2026-98459
mittel
kernel: Bluetooth: ISO: balance the parent hold in hci_bind_bis()Build 01:25 UTC
CVE-2026-98457
mittel
kernel: Bluetooth: L2CAP: validate frame length before control and FCS accessBuild 01:25 UTC
CVE-2026-98456
mittel
kernel: Bluetooth: mgmt: fix race in read_unconf_index_list()Build 01:25 UTC
CVE-2026-98449
mittel
kernel: smb: client: delete compound mids on send failure before unlockBuild 01:25 UTC
CVE-2026-98447
mittel
kernel: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree rootsBuild 01:25 UTC
CVE-2026-98446
mittel
kernel: xfs: don't let hidden_space go negative in xfs_metafile_resv_initBuild 01:25 UTC
CVE-2026-98444
mittel
kernel: xfs: drop dquot flush lock when we can't find a buffer to flushBuild 01:25 UTC
CVE-2026-98441
mittel
kernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entryBuild 01:25 UTC
CVE-2026-98440
mittel
kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destructionBuild 01:25 UTC
CVE-2026-98439
mittel
kernel: smb/server: cancel async requests when closing connectionBuild 01:25 UTC
CVE-2026-98435
mittel
kernel: EDAC/altera: Use parent device for devres in altr_portb_setup()Build 01:25 UTC
CVE-2026-112058
mittel
libdvdnav: libdvdnav: Denial of Service via out-of-bounds read in set_PTTBuild 01:25 UTC
CVE-2026-112057
mittel
libdvdnav: libdvdnav: Denial of Service via crafted disc imageBuild 01:25 UTC
CVE-2026-112008
mittel
libmng: libmng: Denial of Service via heap-based buffer overflow in mng_read_ordr()Build 01:25 UTC
CVE-2026-89096
mittel
nfs-utils: nfs-utils: Denial of Service via memory leak in rpc.statdBuild 01:25 UTC
CVE-2026-110759
mittel
perl-text-csv_xs: Text::CSV_XS: Data corruption via trailing carriage return in empty fieldsBuild 01:25 UTC
CVE-2026-110758
mittel
perl-text-csv_xs: Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace strippingBuild 01:25 UTC
CVE-2026-110757
mittel
perl-text-csv_xs: Text::CSV_XS: CSV record splitting via unquoted numeric fieldsBuild 01:25 UTC
CVE-2026-110756
mittel
perl-text-csv_xs: Text::CSV_XS: Data corruption via invalid UTF-8 byte sequencesBuild 01:25 UTC
CVE-2026-110755
mittel
perl-text-csv_xs: Text::CSV_XS: Denial of Service via crafted carriage return line endingsBuild 01:25 UTC
CVE-2026-110754
mittel
perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsingBuild 01:25 UTC
CVE-2026-110753
mittel
perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rowsBuild 01:25 UTC
CVE-2026-85977
mittel
libtirpc: libtirpc: Denial of Service via unbounded memory allocation during portmapper response decodingBuild 01:25 UTC
CVE-2026-85231
mittel
libtirpc: libtirpc: Denial of service via unbounded memory allocation during RPCSEC_GSS decodingBuild 01:25 UTC
CVE-2026-89098
mittel
nfs-utils: nfs-utils: Denial of Service via assertion failure in fsiddBuild 01:25 UTC
CVE-2026-46471
mittel
gstreamer1-plugins-good: gstreamer1-plugins-good: information disclosure via out-of-bounds read during MP4 parsingBuild 01:25 UTC
CVE-2026-111555
mittel
luksmeta: Missing slot-range validation permits out-of-gap device I/OBuild 01:25 UTC
CVE-2026-111269
mittel
libical: libical: Denial of Service via out-of-bounds read in icalvalue_decode_ical_string()Build 01:25 UTC
CVE-2026-111157
mittel
sox: sox: Denial of Service via crafted WAV fileBuild 01:25 UTC
CVE-2026-111141
mittel
zziplib: zziplib: Denial of Service via out-of-bounds read in central directory parsingBuild 01:25 UTC
CVE-2026-111137
mittel
libsmi: libsmi: Denial of service via out-of-bounds write in smiValueAsString()Build 01:25 UTC
CVE-2026-111132
mittel
libgxps: libgxps: Denial of Service via crafted XPS documentBuild 01:25 UTC
CVE-2026-110602
mittel
libmspack: libmspack: Memory corruption via uninitialized pointer free in kwajd_openBuild 01:25 UTC
CVE-2026-98430
mittel
kernel: RDMA/efa: Keep admin queues alive while IRQ is registeredBuild 01:25 UTC
CVE-2026-98405
mittel
kernel: smb: client: fix missing iov bounds check in parse_posix_sids()Build 01:25 UTC
CVE-2026-100231
mittel
gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect UTF-16 size calculation for non-BMP charactersBuild 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.