Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-98859
media
kernel: kernel: Denial of service via use-after-free in HID multitouch driverbuild de las 07:11 UTC
CVE-2026-98852
media
kernel: net: extend IPv6 exthdr detection of tunneled packetsbuild de las 07:11 UTC
CVE-2026-98850
media
kernel: net/packet: prevent TX_RING byte count overflowbuild de las 07:11 UTC
CVE-2026-98849
media
kernel: pfcp: fix socket lifetime on netdevice registration failurebuild de las 07:11 UTC
CVE-2026-98847
media
kernel: rtc: spear: initialize IRQ state before requesting alarm IRQbuild de las 07:11 UTC
CVE-2026-98843
media
kernel: netfs: zero gaps in read-gaps folio to avoid writing back stale databuild de las 07:11 UTC
CVE-2026-98840
media
kernel: kernel: Denial of Service via use-after-free in virtual console screen driverbuild de las 07:11 UTC
CVE-2026-98838
media
kernel: vt: skip screen update for DEC alignment test on backgroup consolesbuild de las 07:11 UTC
CVE-2026-98830
media
kernel: kernel: Denial of Service via buffer overflow in WFx Wi-Fi driverbuild de las 07:11 UTC
CVE-2026-98828
media
kernel: wifi: ath9k: reject short WMI command responsesbuild de las 07:11 UTC
CVE-2026-98822
media
kernel: wifi: mac80211: prevent AP VLAN tx from other interfacesbuild de las 07:11 UTC
CVE-2026-98821
media
kernel: block: reject polled dio with user integrity metadatabuild de las 07:11 UTC
CVE-2026-98816
media
kernel: bpf: Fix overflow of jump offset in constant blindingbuild de las 07:11 UTC
CVE-2026-98812
media
kernel: net/mctp: publish the mctp_dev only after it is initialisedbuild de las 07:11 UTC
CVE-2026-98810
media
kernel: wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()build de las 07:11 UTC
CVE-2026-98808
media
kernel: net: systemport: Fix buffer overflow in bcm_sysport_get_stats()build de las 07:11 UTC
CVE-2026-98806
media
kernel: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabledbuild de las 07:11 UTC
CVE-2026-98801
media
kernel: kernel: Denial of Service via improper socket memory reservation handlingbuild de las 07:11 UTC
CVE-2026-98789
media
kernel: bpf: Fix objects stuck in free_by_rcu_ttracebuild de las 07:11 UTC
CVE-2026-98785
media
kernel: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspendbuild de las 07:11 UTC
CVE-2026-98778
media
kernel: binder: fix is_failure flag for superseded transaction cleanupbuild de las 07:11 UTC
CVE-2026-98775
media
kernel: nitro_enclaves: fix use-after-free on SLOT_ALLOC failurebuild de las 07:11 UTC
CVE-2026-98773
media
kernel: USB: cdc-acm: skip URB restart in port_shutdown if disconnectedbuild de las 07:11 UTC
CVE-2026-98772
media
kernel: USB: serial: fix port tear down use-after-freebuild de las 07:11 UTC
CVE-2026-98768
media
kernel: kernel: Denial of Service via race condition during ANX7411 driver removalbuild de las 07:11 UTC
CVE-2026-98761
media
kernel: usb: typec: tcpm: recover after failure to start the frs amsbuild de las 07:11 UTC
CVE-2026-98760
media
kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()build de las 07:11 UTC
CVE-2026-98759
media
kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()build de las 07:11 UTC
CVE-2026-98753
media
kernel: tty: tty_port: restore TTY_IO_ERROR on activation failurebuild de las 07:11 UTC
CVE-2026-98750
media
kernel: kernel: use-after-free via race condition in TTY device registrationbuild de las 07:11 UTC
CVE-2026-98745
media
kernel: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systemsbuild de las 07:11 UTC
CVE-2026-98744
media
kernel: ASoC: codecs: max98363: fix uninitialized stream_config->typebuild de las 07:11 UTC
CVE-2026-98743
media
kernel: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->typebuild de las 07:11 UTC
CVE-2026-98739
media
kernel: Bluetooth: RFCOMM: Fix initial port reference racebuild de las 07:11 UTC
CVE-2026-98736
media
kernel: Bluetooth: hci_conn: Lock parent access during enhanced SCO setupbuild de las 07:11 UTC
CVE-2026-98733
media
kernel: kernel: Denial of Service via use-after-free in Bluetooth ISO packet queueingbuild de las 07:11 UTC
CVE-2026-98731
media
kernel: Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()build de las 07:11 UTC
CVE-2026-98729
media
kernel: x86/mm: Don't apply va_align to hugetlb mappings on AMD F15hbuild de las 07:11 UTC
CVE-2026-98727
media
kernel: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is knownbuild de las 07:11 UTC
CVE-2026-98726
media
kernel: nvme-multipath: fix underflow in ANA log bounds checksbuild de las 07:11 UTC
CVE-2026-98724
media
kernel: nvmet: pci-epf: reject too-short SGL segmentsbuild de las 07:11 UTC
CVE-2026-98723
media
kernel: nvmet: copy the hostid into the ctrl before creating PR pc_refsbuild de las 07:11 UTC
CVE-2026-98719
media
kernel: KVM: SEV: Nullify "have run CPUs" mask pointer when freeing itbuild de las 07:11 UTC
CVE-2026-98717
media
kernel: KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummybuild de las 07:11 UTC
CVE-2026-98709
media
kernel: kernel: mac80211: Denial of Service via use-after-free during channel switchingbuild de las 07:11 UTC
CVE-2026-98705
media
kernel: wifi: mac80211: account proxy paths against the mesh path limitbuild de las 07:11 UTC
CVE-2026-98698
media
kernel: wifi: mac80211: handle empty FILS association request payloadbuild de las 07:11 UTC
CVE-2026-98696
media
kernel: USB: serial: fix driver deregistration orderbuild de las 07:11 UTC
CVE-2026-98695
media
kernel: USB: serial: fix ioctl hangup racebuild de las 07:11 UTC
CVE-2026-98694
media
kernel: thunderbolt: Fix KASAN reported use-after-free when request is canceledbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.