Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-98291
media
kernel: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submitbuild de las 07:11 UTC
CVE-2026-98290
media
kernel: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanupbuild de las 07:11 UTC
CVE-2026-98288
media
kernel: net: stmmac: fix TSO header length truncationbuild de las 07:11 UTC
CVE-2026-98287
media
kernel: pppoatm: ensure a writable skb header and linear databuild de las 07:11 UTC
CVE-2026-98286
media
kernel: drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardownbuild de las 07:11 UTC
CVE-2026-98284
media
kernel: netlink: do not free nlk->groups while lockless readers can use itbuild de las 07:11 UTC
CVE-2026-98283
media
kernel: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()build de las 07:11 UTC
CVE-2026-98282
media
kernel: powerpc/iommu: Fix the overflow validation in iommu_tce_check_iobabuild de las 07:11 UTC
CVE-2026-98281
media
kernel: futex: Also allocate private hash on vfork()build de las 07:11 UTC
CVE-2026-98280
media
kernel: drm/xe/i2c: Disable IRQ on unbindbuild de las 07:11 UTC
CVE-2026-98279
media
kernel: btrfs: handle lack of space when cleaning up verity itemsbuild de las 07:11 UTC
CVE-2026-98277
media
kernel: eth: fbnic: ring the doorbell if a burst ends in a dropbuild de las 07:11 UTC
CVE-2026-98276
media
kernel: net: lock the socket in sock_gettstamp()build de las 07:11 UTC
CVE-2026-98275
media
In the Linux kernel, the following vulnerability has been resolved: n ...build de las 07:11 UTC
CVE-2026-98274
media
In the Linux kernel, the following vulnerability has been resolved: n ...build de las 07:11 UTC
CVE-2026-98273
media
kernel: x86/kprobes: Fix crash when probing CS CALL instructionsbuild de las 07:11 UTC
CVE-2026-98272
media
kernel: net: mvpp2: prevent buffer overflow in page_pool allocationbuild de las 07:11 UTC
CVE-2026-98271
media
kernel: net: skbuff: do not leave stale header offsets after pskb_carve()build de las 07:11 UTC
CVE-2026-98269
media
kernel: btrfs: abort transaction on failure to update inode for hole punching and reflinkingbuild de las 07:11 UTC
CVE-2026-98267
media
kernel: 9p: Fix v9fs_issue_write() to update i_size and remote_i_sizebuild de las 07:11 UTC
CVE-2026-98266
media
kernel: ALSA: core: Fix potential UAF after asynchronous card releasebuild de las 07:11 UTC
CVE-2026-98265
media
kernel: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacitybuild de las 07:11 UTC
CVE-2026-98264
media
kernel: ALSA: virtio: reset device before deleting virtqueuesbuild de las 07:11 UTC
CVE-2026-98262
media
kernel: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLYbuild de las 07:11 UTC
CVE-2026-98261
media
kernel: cifs: Fix server use-after-free in cifs_chan_skip_or_disable()build de las 07:11 UTC
CVE-2026-98258
media
kernel: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry listbuild de las 07:11 UTC
CVE-2026-98257
media
kernel: rds: ib: use rds_conn_drop() on protocol version mismatchbuild de las 07:11 UTC
CVE-2026-98255
media
kernel: tcp: exclude old ACKs from tcp fast pathbuild de las 07:11 UTC
CVE-2026-98254
media
kernel: swiotlb: use the adjusted address for the highmem page lookupbuild de las 07:11 UTC
CVE-2026-98253
media
kernel: RDMA/ucma: Serialize join and leave on copy_to_user failurebuild de las 07:11 UTC
CVE-2026-98252
media
kernel: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()build de las 07:11 UTC
CVE-2026-98251
media
kernel: openvswitch: avoid reallocating confirmed conntrack labelsbuild de las 07:11 UTC
CVE-2026-98250
media
kernel: nfsd: fix handling of NFSEXP_PNFS in the netlink codepathbuild de las 07:11 UTC
CVE-2026-98249
media
kernel: arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvcbuild de las 07:11 UTC
CVE-2026-98248
media
kernel: arm64: percpu: Fix LSE operations on {8,16}-bit typesbuild de las 07:11 UTC
CVE-2026-98247
media
kernel: Bluetooth: hci_codec: validate vendor codec count lengthbuild de las 07:11 UTC
CVE-2026-98246
media
kernel: Bluetooth: hci_sync: Serialize local codec list cleanupbuild de las 07:11 UTC
CVE-2026-98245
media
kernel: btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()build de las 07:11 UTC
CVE-2026-98244
media
kernel: btrfs: clear free space tree creation state on rebuild failurebuild de las 07:11 UTC
CVE-2026-98243
media
kernel: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3build de las 07:11 UTC
CVE-2026-98242
media
kernel: dma-buf: Fix silent overflow for phys vec to sgtbuild de las 07:11 UTC
CVE-2026-98241
media
kernel: ipv6: xfrm: use full sockets in local error pathsbuild de las 07:11 UTC
CVE-2026-98239
media
kernel: net: lan743x: fix RX checksum use-after-freebuild de las 07:11 UTC
CVE-2026-98238
media
kernel: net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()build de las 07:11 UTC
CVE-2026-98236
media
kernel: net: wwan: mhi_wwan_mbim: check skb_copy_bits() return valuebuild de las 07:11 UTC
CVE-2026-98232
media
In the Linux kernel, the following vulnerability has been resolved: s ...build de las 07:11 UTC
CVE-2026-98231
media
kernel: xfrm: serialize state GC with device state flushbuild de las 07:11 UTC
CVE-2026-98230
media
kernel: xfrm: use hlist_del_init_rcu for state_cache and state_cache_inputbuild de las 07:11 UTC
CVE-2026-98229
media
kernel: xfrm: save input state data before secpath resetsbuild de las 07:11 UTC
CVE-2026-98228
media
kernel: mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.