Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-98893
media
kernel: firmware: arm_scmi: Validate SENSOR_UPDATE payload sizebuild de las 07:13 UTC
CVE-2026-98892
media
kernel: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload sizebuild de las 07:13 UTC
CVE-2026-98891
media
kernel: wifi: mac80211: validate deauth frame length before reason accessbuild de las 07:13 UTC
CVE-2026-98890
media
kernel: wifi: libertas: reject short monitor TX framesbuild de las 07:13 UTC
CVE-2026-98889
media
kernel: wifi: iwlwifi: mvm: fix sched scan IE sizingbuild de las 07:13 UTC
CVE-2026-98888
media
kernel: arm64: kprobes: Allow reentering kprobes while single-steppingbuild de las 07:13 UTC
CVE-2026-98887
media
kernel: wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFObuild de las 07:13 UTC
CVE-2026-98886
media
kernel: drm/gma500: return errors from Oaktrail HDMI I2C readsbuild de las 07:13 UTC
CVE-2026-98884
media
kernel: mmc: core: Add validation for host-provided max_segsbuild de las 07:13 UTC
CVE-2026-98883
media
kernel: serial: 8250_port: recognize UPIO_AUbuild de las 07:13 UTC
CVE-2026-98882
media
kernel: media: chips-media: wave5: Add range checks for dec_output_infobuild de las 07:13 UTC
CVE-2026-98881
media
kernel: net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()build de las 07:13 UTC
CVE-2026-98880
media
kernel: ntfs3: handle set_blocksize failuresbuild de las 07:13 UTC
CVE-2026-98879
media
kernel: isofs: handle set_blocksize failuresbuild de las 07:13 UTC
CVE-2026-98878
media
kernel: irqchip/gic-v5: Immediately exec priority drop following activatebuild de las 07:13 UTC
CVE-2026-98877
media
kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probedbuild de las 07:13 UTC
CVE-2026-115360
media
github.com/openbao/openbao: OpenBao: Open redirect via OIDC identity provider user interfacebuild de las 07:13 UTC
CVE-2026-93237
media
kernel: LoongArch: Add DIRECT_MAP_PHYSMEM_END definitionbuild de las 07:13 UTC
CVE-2026-80728
media
kernel: Revert "drm/amdgpu: fix aperture mapping leak"build de las 07:13 UTC
CVE-2026-43670
media
A Content Security Policy bypass was addressed with improved enforceme ...build de las 07:13 UTC
CVE-2024-43768
media
In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds ...build de las 07:13 UTC
CVE-2026-116152
media
ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoderbuild de las 01:25 UTC
CVE-2026-106074
media
nodejs: nodejs: predictable random values via snapshot entropy cache reusebuild de las 01:25 UTC
CVE-2026-106072
media
nodejs: nodejs: Authentication bypass via non-canonical IPv4 hostname verificationbuild de las 01:25 UTC
CVE-2026-105481
media
nodejs: nodejs: Response desynchronization via improper HTTP keep-alive connection reusebuild de las 01:25 UTC
CVE-2026-55889
media
xdg-desktop-portal: xdg-desktop-portal: unauthorized data disclosure via predictable token generationbuild de las 01:25 UTC
CVE-2026-98876
media
kernel: host1x: bus: Fix missing ops null check in error teardownbuild de las 01:25 UTC
CVE-2026-98875
media
kernel: drm/nouveau/gsp: add SEC2 to GA100 chip tablebuild de las 01:25 UTC
CVE-2026-98872
media
kernel: freevxfs: don't BUG() on unknown typed-extent typebuild de las 01:25 UTC
CVE-2026-98871
media
kernel: crypto: ccp - Fix possible deadlock in SEV init failure pathbuild de las 01:25 UTC
CVE-2026-98870
media
kernel: ksmbd: remove stale channels from all sessions on teardownbuild de las 01:25 UTC
CVE-2026-115327
media
libyang: libyang: Denial of Service via crafted NETCONF RPC action envelopebuild de las 01:25 UTC
CVE-2026-115207
media
patch: Filename validation bypass in reversal fallback allows file creation outside the working directorybuild de las 01:25 UTC
CVE-2026-92822
media
libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd YAMLbuild de las 01:25 UTC
CVE-2026-114038
media
device-mapper-multipath: device-mapper-multipath: Information disclosure via malformed format stringbuild de las 01:25 UTC
CVE-2026-108518
media
perl-dbi: perl-dbi: Denial of Service via type confusion in dbi_profilebuild de las 01:25 UTC
CVE-2026-92539
media
grafana: Grafana: Unauthorized cross-organization user management via the SCIM APIbuild de las 01:25 UTC
CVE-2026-113680
media
harfbuzz: harfbuzz: Denial of Service via crafted font in WebAssembly shaperbuild de las 01:25 UTC
CVE-2026-113679
media
harfbuzz: HarfBuzz: Out-of-bounds write via crafted font in WebAssembly shaperbuild de las 01:25 UTC
CVE-2026-113496
media
cockpit-machines: VNC console password disclosure through virt-xml command-line argumentsbuild de las 01:25 UTC
CVE-2026-113495
media
cockpit-machines: RHSM access-token disclosure through image helper command-line argumentsbuild de las 01:25 UTC
CVE-2026-101201
media
qt5-qtbase: qt6-qt5compat: qt: Denial of Service via out-of-bounds read in QBinaryJsonbuild de las 01:25 UTC
CVE-2026-8168
media
qt5-qtsvg: qt6-qtsvg: qt: Denial of Service via deeply nested SVG elementsbuild de las 01:25 UTC
CVE-2026-112283
media
libbluray: libbluray: Denial of Service via uncontrolled memory allocation in clpi_parsebuild de las 01:25 UTC
CVE-2026-112276
media
netpbm: netpbm: Denial of Service via out-of-bounds read in rasttopnmbuild de las 01:25 UTC
CVE-2026-112275
media
netpbm: netpbm: Denial of Service via heap-based buffer overflow in rasttopnmbuild de las 01:25 UTC
CVE-2026-98868
media
kernel: dm-pcache: reject a kset that overruns its segmentbuild de las 01:25 UTC
CVE-2026-98866
media
kernel: sched/cache: Introduce task_struct->sched_cache_grp to fix UAFbuild de las 01:25 UTC
CVE-2026-98864
media
kernel: sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a taskbuild de las 01:25 UTC
CVE-2026-98863
media
kernel: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages failsbuild de las 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.