Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-98693
media
kernel: thunderbolt: Hold a router reference for each allocated HopIDbuild de las 07:11 UTC
CVE-2026-98689
media
kernel: thunderbolt: Don't access a DP tunnel after its DPRX read was canceledbuild de las 07:11 UTC
CVE-2026-98688
media
kernel: thunderbolt: Fix NULL dereference in tb_remove_work()build de las 07:11 UTC
CVE-2026-98681
media
kernel: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW racesbuild de las 07:11 UTC
CVE-2026-98672
media
kernel: iio: adc: stm32-adc: fix possible division by zero in processed channelbuild de las 07:11 UTC
CVE-2026-98662
media
kernel: kernel: Denial of Service via use-after-free during gp2ap020a00f device removalbuild de las 07:11 UTC
CVE-2026-98653
media
kernel: KVM: s390: Fix _gaccess_shadow_fault()build de las 07:11 UTC
CVE-2026-98651
media
kernel: KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()build de las 07:11 UTC
CVE-2026-98650
media
kernel: KVM: s390: Fix potential races in dat skey functionsbuild de las 07:11 UTC
CVE-2026-98649
media
kernel: KVM: s390: Fix race in _destroy_pages_crste()build de las 07:11 UTC
CVE-2026-98648
media
kernel: s390/uv: Prevent potential out-of-bounds readbuild de las 07:11 UTC
CVE-2026-98646
media
kernel: tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF contextbuild de las 07:11 UTC
CVE-2026-98644
media
kernel: bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()build de las 07:11 UTC
CVE-2026-98640
media
kernel: HID: amd_sfh: Validate PCI BAR size before mappingbuild de las 07:11 UTC
CVE-2026-98637
media
kernel: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failurebuild de las 07:11 UTC
CVE-2026-98635
media
kernel: scsi: block: Fix zones_cond out-of-bounds write on zone reportbuild de las 07:11 UTC
CVE-2026-98634
media
kernel: scsi: sd_zbc: Reject disks with too many zonesbuild de las 07:11 UTC
CVE-2026-98631
media
kernel: xsk: Use a 32-bit compare in xsk_map_gen_lookupbuild de las 07:11 UTC
CVE-2026-98630
media
kernel: eth: fbnic: Fix payload page pool error cleanupbuild de las 07:11 UTC
CVE-2026-98622
media
kernel: net/sched: act_ct: don't WARN on benign flow_offload_alloc() failurebuild de las 07:11 UTC
CVE-2026-98613
media
kernel: bpf: Bound ownership depth through local kptrs and graph rootsbuild de las 07:11 UTC
CVE-2026-98612
media
kernel: net: usb: catc: bound the RX packet length in catc_rx_done()build de las 07:11 UTC
CVE-2026-98611
media
kernel: bpf: Check params size before reading reserved fieldsbuild de las 07:11 UTC
CVE-2026-98610
media
kernel: net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budgetbuild de las 07:11 UTC
CVE-2026-98606
media
kernel: drm/virtio: release the GEM object on virtio_gpu_vram_create() errorsbuild de las 07:11 UTC
CVE-2026-98605
media
kernel: drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attachbuild de las 07:11 UTC
CVE-2026-98601
media
kernel: Bluetooth: btintel_pcie: validate device-supplied DMA indicesbuild de las 07:11 UTC
CVE-2026-98598
media
kernel: ipv6: Prevent rt6_insert_exception() for dying fib6_infobuild de las 07:11 UTC
CVE-2026-98597
media
kernel: net: usb: sr9700: include receive overhead in the length checkbuild de las 07:11 UTC
CVE-2026-98596
media
kernel: ipv6: Fix dst leak for uncached routesbuild de las 07:11 UTC
CVE-2026-98592
media
kernel: net: spacemit: clear TX descriptor on fragment mapping failurebuild de las 07:11 UTC
CVE-2026-98591
media
kernel: bpf: Fix bounds check for skb-backed dynptrsbuild de las 07:11 UTC
CVE-2026-98588
media
kernel: bpf, sockmap: Reject max_entries > INT_MAX in sock_map_allocbuild de las 07:11 UTC
CVE-2026-98585
media
kernel: eth: fbnic: Avoid rounding zero ring sizesbuild de las 07:11 UTC
CVE-2026-98582
media
kernel: nfc: st21nfca: validate received frame sizebuild de las 07:11 UTC
CVE-2026-98581
media
kernel: nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()build de las 07:11 UTC
CVE-2026-98580
media
kernel: nfc: llcp: Fix race condition in accept_queue lifecyclebuild de las 07:11 UTC
CVE-2026-98577
media
kernel: nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()build de las 07:11 UTC
CVE-2026-98575
media
kernel: nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()build de las 07:11 UTC
CVE-2026-98569
media
kernel: ip_gre: Reject enabling collect metadata through changelinkbuild de las 07:11 UTC
CVE-2026-98567
media
kernel: net: xps: reject an out of range traffic classbuild de las 07:11 UTC
CVE-2026-98561
media
kernel: nfp: hold IPsec RX state under the XArray lockbuild de las 07:11 UTC
CVE-2026-98558
media
kernel: net: flush skb_defer_nodes in dev_cpu_dead()build de las 07:11 UTC
CVE-2026-98556
media
kernel: gve: DQO: reject TSO packets with an out of range MSSbuild de las 07:11 UTC
CVE-2026-98555
media
kernel: llc: fix skb UAF and leaks on llc_mac_hdr_init() failurebuild de las 07:11 UTC
CVE-2026-98554
media
kernel: vlan: ensure sufficient headroom in vlan_dev_hard_header()build de las 07:11 UTC
CVE-2026-98549
media
kernel: tcp: prevent collapsing skbs across boundary in rtx queuebuild de las 07:11 UTC
CVE-2026-98547
media
kernel: af_packet: fix integer overflow in prb_calc_retire_blk_tmo()build de las 07:11 UTC
CVE-2026-98546
media
kernel: arm64/boot: Disable trapping of PMZR_EL0 writes to EL2build de las 07:11 UTC
CVE-2026-98545
media
kernel: ata: libata-scsi: bound the ATA passthru sense descriptor writesbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.