Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-98543
media
kernel: bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdirbuild de las 07:11 UTC
CVE-2026-98541
media
kernel: fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECTbuild de las 07:11 UTC
CVE-2026-98538
media
kernel: writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodesbuild de las 07:11 UTC
CVE-2026-98537
media
kernel: workqueue: Fix NULL current_pwq deref in flush dependency checkbuild de las 07:11 UTC
CVE-2026-98536
media
kernel: writeback: report a Tasks-RCU quiescent state per cgwb drain passbuild de las 07:11 UTC
CVE-2026-98526
media
kernel: llc: reserve device headroom for allocated framesbuild de las 07:11 UTC
CVE-2026-98525
media
kernel: mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()build de las 07:11 UTC
CVE-2026-98522
media
kernel: drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()build de las 07:11 UTC
CVE-2026-98521
media
kernel: drm/i915: fix incorrect RCU teardown orderbuild de las 07:11 UTC
CVE-2026-98518
media
kernel: drm/nouveau/dmem: pin VRAM for the whole registered rangebuild de las 07:11 UTC
CVE-2026-98517
media
kernel: drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEMbuild de las 07:11 UTC
CVE-2026-98515
media
kernel: drm/nouveau: fix double-free in nvif_vmm_dtorbuild de las 07:11 UTC
CVE-2026-98512
media
kernel: drm/nouveau: RCU-free the scheduler-containing nouveau_schedbuild de las 07:11 UTC
CVE-2026-98511
media
kernel: drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()build de las 07:11 UTC
CVE-2026-98510
media
kernel: drm/xe/vm: nuke PTs only after unlinking contested VMAsbuild de las 07:11 UTC
CVE-2026-98508
media
kernel: drm/virtio: fix NULL pointer dereference on fence allocation failurebuild de las 07:11 UTC
CVE-2026-98507
media
kernel: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publishbuild de las 07:11 UTC
CVE-2026-98506
media
kernel: mm/hugetlb: do not dissolve gigantic pages without runtime supportbuild de las 07:11 UTC
CVE-2026-98501
media
kernel: HID: alps: fix use-after-free on input2 registration failurebuild de las 07:11 UTC
CVE-2026-98499
media
kernel: HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()build de las 07:11 UTC
CVE-2026-98497
media
kernel: net/mlx5e: fix swapped IPv6 IPsec policy masksbuild de las 07:11 UTC
CVE-2026-98495
media
kernel: net: arp: terminate device name before lookupbuild de las 07:11 UTC
CVE-2026-98494
media
kernel: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean readbuild de las 07:11 UTC
CVE-2026-98489
media
kernel: net: atl1c: fix soft lockup on out-of-range tpd_cons readbuild de las 07:11 UTC
CVE-2026-98488
media
kernel: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean readbuild de las 07:11 UTC
CVE-2026-98487
media
kernel: net: bridge: mdb: restart port group walk after deletionbuild de las 07:11 UTC
CVE-2026-98485
media
kernel: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds readbuild de las 07:11 UTC
CVE-2026-98482
media
kernel: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()build de las 07:11 UTC
CVE-2026-98481
media
kernel: nfc: port100: reject frames whose declared length exceeds the received databuild de las 07:11 UTC
CVE-2026-98479
media
kernel: scsi: libiscsi_tcp: Check the data direction of a Data-In PDUbuild de las 07:11 UTC
CVE-2026-98478
media
kernel: scsi: ufs: core: Keep internal commands dispatchable during error handlingbuild de las 07:11 UTC
CVE-2026-98477
media
kernel: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()build de las 07:11 UTC
CVE-2026-98476
media
kernel: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()build de las 07:11 UTC
CVE-2026-98475
media
kernel: s390/cmf: Fix virtual vs physical address confusionbuild de las 07:11 UTC
CVE-2026-98471
media
kernel: KVM: SEV: Do cache maintenance on the source VM during intra-host migrationbuild de las 07:11 UTC
CVE-2026-98470
media
kernel: KVM: arm64: Don't WARN on an unknown VM ioctl in protected modebuild de las 07:11 UTC
CVE-2026-98469
media
kernel: KVM: arm64: Fix AArch32 DBGBXVR<n> handlingbuild de las 07:11 UTC
CVE-2026-98467
media
kernel: KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown racebuild de las 07:11 UTC
CVE-2026-98465
media
kernel: RISC-V: KVM: Serialize IMSIC attributes with vCPU migrationbuild de las 07:11 UTC
CVE-2026-98464
media
kernel: RISC-V: KVM: Synchronize hrtimer callback during teardownbuild de las 07:11 UTC
CVE-2026-98461
media
kernel: Bluetooth: hci_sock: validate event length before filteringbuild de las 07:11 UTC
CVE-2026-98460
media
kernel: Bluetooth: hci_sock: reject out-of-range OCF valuesbuild de las 07:11 UTC
CVE-2026-98455
media
kernel: Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFObuild de las 07:11 UTC
CVE-2026-98454
media
kernel: smb: client: fix create context out-of-bounds readsbuild de las 07:11 UTC
CVE-2026-98453
media
kernel: smb: client: close handle after create-context parsing failurebuild de las 07:11 UTC
CVE-2026-98452
media
kernel: smb: client: clean up failed cached directory opensbuild de las 07:11 UTC
CVE-2026-98445
media
kernel: xfs: don't let memory failures leak blocks and kill repairsbuild de las 07:11 UTC
CVE-2026-98443
media
kernel: xfs: fix cursor and pointer handling when recovering iunlink bucketsbuild de las 07:11 UTC
CVE-2026-98436
media
In the Linux kernel, the following vulnerability has been resolved: a ...build de las 07:11 UTC
CVE-2026-98434
media
kernel: sysctl: Check range in proc_dointvec_ms_jiffies_minmaxbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.