Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-98595
baja
kernel: udp: remove a disconnected socket from the 4-tuple hash tablebuild de las 07:11 UTC
CVE-2026-98594
baja
kernel: tg3: clean up PHYLIB resources on probe failurebuild de las 07:11 UTC
CVE-2026-98579
baja
kernel: nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failurebuild de las 07:11 UTC
CVE-2026-98553
baja
kernel: autofs: fix sbi->pipe file reference leak in autofs_kill_sb()build de las 07:11 UTC
CVE-2026-98552
baja
kernel: perf/core: Fix a refcount leak in attach_perf_ctx_data()build de las 07:11 UTC
CVE-2026-98551
baja
kernel: perf/core: Fill branch entries with a single assignmentbuild de las 07:11 UTC
CVE-2026-98542
baja
kernel: cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflictbuild de las 07:11 UTC
CVE-2026-98535
baja
kernel: fsl/fman: Fix clk reference leak in read_dts_node()build de las 07:11 UTC
CVE-2026-98531
baja
kernel: ipv6: sr: enforce exact attribute length for SEG6_ATTR_DSTbuild de las 07:11 UTC
CVE-2026-98529
baja
kernel: gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()build de las 07:11 UTC
CVE-2026-98528
baja
kernel: gpio: cdev: fix kernel stack leak to user-space in error pathbuild de las 07:11 UTC
CVE-2026-98527
baja
kernel: gpio: zynq: fix runtime PM leak on request error pathbuild de las 07:11 UTC
CVE-2026-98519
baja
kernel: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()build de las 07:11 UTC
CVE-2026-98516
baja
kernel: drm/nouveau: Fix bridge reference leak in nv1a_ram_new()build de las 07:11 UTC
CVE-2026-98514
baja
kernel: drm/nouveau: Fix gem reference leak in validate_init()build de las 07:11 UTC
CVE-2026-98513
baja
kernel: drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()build de las 07:11 UTC
CVE-2026-98509
baja
kernel: drm/virtio: fix memory leak of fence event on execbuffer failurebuild de las 07:11 UTC
CVE-2026-98505
baja
kernel: mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()build de las 07:11 UTC
CVE-2026-98502
baja
kernel: HID: alps: unregister DualPoint Stick input device on removebuild de las 07:11 UTC
CVE-2026-98498
baja
kernel: net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()build de las 07:11 UTC
CVE-2026-98492
baja
kernel: net: macb: fix dma_alloc_coherent() leak on macb_alloc() error pathsbuild de las 07:11 UTC
CVE-2026-98486
baja
kernel: net: ena: fix MMIO read buffer leak on probe failurebuild de las 07:11 UTC
CVE-2026-98484
baja
kernel: netfilter: nf_tables: skip expired catchall elements on insert and deletebuild de las 07:11 UTC
CVE-2026-98480
baja
kernel: nfc: trf7970a: power down on startup RX gain failurebuild de las 07:11 UTC
CVE-2026-98473
baja
kernel: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host configbuild de las 07:11 UTC
CVE-2026-98472
baja
kernel: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEVbuild de las 07:11 UTC
CVE-2026-98468
baja
kernel: KVM: arm64: Fix spurious warning for benign stage 2 teardown racebuild de las 07:11 UTC
CVE-2026-98450
baja
kernel: smb: client: close completed creates on compound wait errorsbuild de las 07:11 UTC
CVE-2026-98448
baja
kernel: xfs: release orphanage dir inode if chown failsbuild de las 07:11 UTC
CVE-2026-98437
baja
kernel: media: qcom: iris: fix runtime PM reference leaksbuild de las 07:11 UTC
CVE-2026-98433
baja
kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failurebuild de las 07:11 UTC
CVE-2026-17591
baja
libarchive: libarchive: use-after-free via aliased Mac metadata copybuild de las 07:11 UTC
CVE-2026-62438
baja
gimp: gimp: PAA integer overflow out-of-bounds readbuild de las 07:11 UTC
CVE-2026-84823
baja
org.wildfly.core: WildFly: Path traversal in take-snapshot discloses the server configuration to the Monitor rolebuild de las 07:11 UTC
CVE-2026-55467
baja
cups: cups: Denial of Service via unsanitized fax job attributesbuild de las 07:11 UTC
CVE-2026-77564
baja
Talos Linux: Support bundle does not redact registry credentialsbuild de las 07:11 UTC
CVE-2026-98431
baja
kernel: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependencybuild de las 07:11 UTC
CVE-2026-98425
baja
kernel: wifi: mac80211: don't warn when an IBSS has no channel to scanbuild de las 07:11 UTC
CVE-2026-98424
baja
kernel: wifi: cfg80211: undo netns switch if renaming the wiphy failsbuild de las 07:11 UTC
CVE-2026-98422
baja
kernel: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdownbuild de las 07:11 UTC
CVE-2026-98421
baja
kernel: wifi: mac80211: require a peer station for TDLS setup confirmbuild de las 07:11 UTC
CVE-2026-98406
baja
kernel: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driverbuild de las 07:11 UTC
CVE-2026-98404
baja
kernel: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()build de las 07:11 UTC
CVE-2026-98400
baja
kernel: s390/ipl: Fix NULL deref in kdump without re-IPL parm blockbuild de las 07:11 UTC
CVE-2026-98399
baja
kernel: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm blockbuild de las 07:11 UTC
CVE-2026-98388
baja
kernel: exec: do_close_on_exec() before taking exec_update_lockbuild de las 07:11 UTC
CVE-2026-98387
baja
kernel: s390/crypto: Fix skcipher_walk return code handling in aes_s390build de las 07:11 UTC
CVE-2026-98386
baja
kernel: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slotbuild de las 07:11 UTC
CVE-2026-88842
baja
busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruptionbuild de las 07:11 UTC
CVE-2026-77205
baja
libreswan: Denial of Service via sending bogus X.509 certificatesbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.