Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-98227
media
kernel: memstick: ms_block: destroy io_queue workqueue on removalbuild de las 07:11 UTC
CVE-2026-98226
media
kernel: mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage countbuild de las 07:11 UTC
CVE-2026-98225
media
kernel: mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmembuild de las 07:11 UTC
CVE-2026-98221
media
kernel: KEYS: trusted: Fix tpm2_load_cmd() boundary checkbuild de las 07:11 UTC
CVE-2026-98220
media
kernel: sched_ext: Fix NULL sched deref in kfunc sub-sched error pathsbuild de las 07:11 UTC
CVE-2026-98219
media
kernel: sched_ext: Close the pre-enable ops error claim windowbuild de las 07:11 UTC
CVE-2026-98218
media
kernel: i2c: atr: fix dangling adapter pointer on add failurebuild de las 07:11 UTC
CVE-2026-98217
media
kernel: IB/mlx4: Fix use-after-free on pkey sysfs registration failurebuild de las 07:11 UTC
CVE-2026-98216
media
kernel: IB/hfi1: Fix the PIO_CRED credit-return mmapbuild de las 07:11 UTC
CVE-2026-98215
media
kernel: selinux: preserve user SID across nested backing filesbuild de las 07:11 UTC
CVE-2026-98214
media
kernel: selinux: recheck intermediate backing files on mprotect()build de las 07:11 UTC
CVE-2026-98213
media
kernel: mmc: core: Cancel SDIO IRQ work before freeing hostbuild de las 07:11 UTC
CVE-2026-98212
media
kernel: mmc: hsq: Fix use-after-free in retry workbuild de las 07:11 UTC
CVE-2026-98211
media
kernel: mmc: mmci: Fix use-after-free in busy-timeout workbuild de las 07:11 UTC
CVE-2026-98210
media
kernel: mmc: mxcmmc: cancel data work and watchdog on removebuild de las 07:11 UTC
CVE-2026-98209
media
kernel: mmc: sdhci-of-aspeed: Remove children before releasing SDC resourcesbuild de las 07:11 UTC
CVE-2026-98207
media
kernel: mmc: spi: reset bytes_xfered before retrying CRC failuresbuild de las 07:11 UTC
CVE-2026-98206
media
kernel: Input: cyttsp5 - clamp the HID report size before memcpybuild de las 07:11 UTC
CVE-2026-98205
media
kernel: Input: evdev - zero absinfo before partial copy in EVIOCSABSbuild de las 07:11 UTC
CVE-2026-98204
media
kernel: Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()build de las 07:11 UTC
CVE-2026-98201
media
kernel: Input: zero ff_effect before compat copy in input_ff_effect_from_userbuild de las 07:11 UTC
CVE-2026-98200
media
kernel: hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()build de las 07:11 UTC
CVE-2026-98199
media
kernel: hwmon: (pmbus/core) increase number of phases and add new maskbuild de las 07:11 UTC
CVE-2026-98198
media
kernel: hwmon: (pwm-fan) Stop RPM timer before freeing tach databuild de las 07:11 UTC
CVE-2026-98197
media
kernel: hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on removebuild de las 07:11 UTC
CVE-2026-98196
media
kernel: wifi: brcmsmac: fix UAF in brcms_free_timer()build de las 07:11 UTC
CVE-2026-98195
media
kernel: wifi: iwlegacy: fix broadcast stations deallocationbuild de las 07:11 UTC
CVE-2026-98194
media
kernel: wifi: libertas_tf: fix UAF in lbtf_free_adapter()build de las 07:11 UTC
CVE-2026-98193
media
kernel: wifi: libipw: reject TKIP frames without a full MICbuild de las 07:11 UTC
CVE-2026-98192
media
kernel: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardownbuild de las 07:11 UTC
CVE-2026-98190
media
kernel: wifi: wilc1000: fix out-of-bounds read in P2P public action framesbuild de las 07:11 UTC
CVE-2026-98189
media
kernel: wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()build de las 07:11 UTC
CVE-2026-98188
media
kernel: wifi: p54: validate curve data length in the calibration curve convertersbuild de las 07:11 UTC
CVE-2026-98187
media
kernel: wifi: p54: require a full exp_if record in PDR_INTERFACE_LISTbuild de las 07:11 UTC
CVE-2026-98186
media
kernel: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE lengthbuild de las 07:11 UTC
CVE-2026-98185
media
kernel: wifi: mwifiex: validate scan response extentsbuild de las 07:11 UTC
CVE-2026-98184
media
kernel: wifi: mwifiex: prevent authentication frame length truncationbuild de las 07:11 UTC
CVE-2026-98183
media
kernel: wifi: mac80211: avoid out-of-bounds read for empty PREQ elementsbuild de las 07:11 UTC
CVE-2026-98181
media
kernel: drm/gud: fix out-of-bounds write in gud_plane_atomic_check()build de las 07:11 UTC
CVE-2026-98180
media
kernel: drm/msm: RCU-free the scheduler-containing ring and VM objectsbuild de las 07:11 UTC
CVE-2026-98175
media
kernel: smb: client: cancel reconnect work in clean_demultiplex_info()build de las 07:11 UTC
CVE-2026-98174
media
kernel: smb: client: fix rlist race and missing initializationbuild de las 07:11 UTC
CVE-2026-98173
media
kernel: smb: client: fix use-after-free of iface in cifs_try_adding_channels()build de las 07:11 UTC
CVE-2026-98172
media
kernel: smb: client: fix smbd_connection leak on cifs_get_tcp_session() errorbuild de las 07:11 UTC
CVE-2026-98170
media
kernel: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()build de las 07:11 UTC
CVE-2026-98168
media
kernel: smb: client: fix reparse buffer bounds in cifs_query_reparse_point()build de las 07:11 UTC
CVE-2026-98167
media
kernel: smb: client: fix server->total_read for compound encrypted PDUsbuild de las 07:11 UTC
CVE-2026-98166
media
kernel: drm/ttm: fix swapped-out resources never leaving their bulk_move rangebuild de las 07:11 UTC
CVE-2026-105305
media
keycloak-services: keycloak-services: Device Authorization Grant bypasses per-client minimum.acr.value enforcementbuild de las 07:11 UTC
CVE-2026-105775
media
vllm: vLLM: Denial of Service via out-of-bounds read in completions request handlerbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.