Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-99080
baja
kernel: fs: Free any excess xarray nodes in clear_inode()build de las 07:13 UTC
CVE-2026-99075
baja
kernel: kernel: Denial of Service via memory leak in Rust Binderbuild de las 07:13 UTC
CVE-2026-99070
baja
kernel: ipv6: do not warn on route notification size racebuild de las 07:13 UTC
CVE-2026-99068
baja
kernel: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappersbuild de las 07:13 UTC
CVE-2026-98885
baja
kernel: ima: return error early if file xattr cannot be changedbuild de las 07:13 UTC
CVE-2026-115369
baja
github.com/openbao/openbao: OpenBao: Unauthorized certificate issuance via CSR IP SAN validation bypassbuild de las 07:13 UTC
CVE-2026-116159
baja
ImageMagick: ImageMagick: Denial of Service via memory leak in the -cdl optionbuild de las 01:25 UTC
CVE-2026-116151
baja
ImageMagick: ImageMagick: Denial of Service via memory leak in JNG encoderbuild de las 01:25 UTC
CVE-2026-116150
baja
ImageMagick: ImageMagick: Denial of Service via memory leak in FPX encoderbuild de las 01:25 UTC
CVE-2026-116148
baja
ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoderbuild de las 01:25 UTC
CVE-2026-116147
baja
ImageMagick: ImageMagick: Denial of service via unchecked memory allocation in DJVU decoderbuild de las 01:25 UTC
CVE-2026-116146
baja
ImageMagick: ImageMagick: Denial of Service via MSL decoder memory leakbuild de las 01:25 UTC
CVE-2026-116144
baja
ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoderbuild de las 01:25 UTC
CVE-2026-106071
baja
nodejs: nodejs: Permission model bypass via wildcard path matching flawbuild de las 01:25 UTC
CVE-2026-106070
baja
nodejs: Node.js: Security inspection bypass via crafted ZIP archive header mismatchbuild de las 01:25 UTC
CVE-2026-115449
baja
libslirp: libslirp: ICMP echo reply length desynchronization leaks host IP to guestbuild de las 01:25 UTC
CVE-2026-114236
baja
podman: Goroutine/file-descriptor leak in storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer on malformed layersbuild de las 01:25 UTC
CVE-2026-98844
baja
kernel: netfs: clear post-EOF pagecache when extending a file via writebuild de las 01:25 UTC
CVE-2026-98811
baja
kernel: net/sched: cls_api: reclaim an empty proto on the error pathbuild de las 01:25 UTC
CVE-2026-98802
baja
kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DAbuild de las 01:25 UTC
CVE-2026-98777
baja
kernel: binder: fix leaked fd fixups on TF_UPDATE_TXN supersedebuild de las 01:25 UTC
CVE-2026-98774
baja
kernel: rust_binder: cancel deferred work items in thread exitbuild de las 01:25 UTC
CVE-2026-98700
baja
kernel: wifi: mac80211: set info->band for 802.3 encap offload framesbuild de las 01:25 UTC
CVE-2026-98691
baja
kernel: thunderbolt: Tear down inactive DP tunnels when the domain is stoppedbuild de las 01:25 UTC
CVE-2026-98643
baja
kernel: bpf: Fix out-of-bounds read of rtt_min in sock_opsbuild de las 01:25 UTC
CVE-2026-98629
baja
kernel: net/sched: cls_u32: fix manual hash table handle IDR aliasingbuild de las 01:25 UTC
CVE-2026-98628
baja
kernel: bpf: Make post-verification instruction rewrites killablebuild de las 01:25 UTC
CVE-2026-98584
baja
kernel: net/sched: fix potential stack infoleak in em_text_dump()build de las 01:25 UTC
CVE-2026-98560
baja
kernel: net/rds: size a connection's path set by the transport it ends up withbuild de las 01:25 UTC
CVE-2026-98458
baja
kernel: Bluetooth: ISO: release unused CIS holds after channel attachbuild de las 01:25 UTC
CVE-2026-98451
baja
kernel: smb: client: use finish_no_open() for non-regular inodesbuild de las 01:25 UTC
CVE-2026-98438
baja
kernel: mptcp: options: fix uninit-value in mptcp_write_data_finbuild de las 01:25 UTC
CVE-2026-111802
baja
nautilus: nautilus: Arbitrary File Deletion via Trash Symlinkbuild de las 01:25 UTC
CVE-2026-46472
baja
gstreamer1-plugins-good: gstreamer1-plugins-good: Information disclosure via out-of-bounds read in qtdemux_parse_chnlbuild de las 01:25 UTC
CVE-2026-111581
baja
libblockdev: libblockdev: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus methodbuild de las 01:25 UTC
CVE-2026-98427
baja
kernel: net/sched: codel: bound the dropping loop per dequeue callbuild de las 01:25 UTC
CVE-2026-98414
baja
kernel: memcg: avoid charging the root memcg from obj_cgroup_charge_pages()build de las 01:25 UTC
CVE-2026-98402
baja
kernel: net: icmp: avoid invalid transport header access in icmp_send tracepointbuild de las 01:25 UTC
CVE-2026-98398
baja
kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classesbuild de las 01:25 UTC
CVE-2026-98394
baja
kernel: af_unix: Return immediately when manage_oob() returns NULL for 0-length bufferbuild de las 01:25 UTC
CVE-2026-98393
baja
kernel: net: ipv4: Fix UDP length overflow with PMTU discover and big MTUbuild de las 01:25 UTC
CVE-2026-98391
baja
kernel: drm/xe: Guard page-fault worker with runtime PM checkbuild de las 01:25 UTC
CVE-2026-98390
baja
kernel: x86/amd_node: Avoid divide by zero on virtualized systemsbuild de las 01:25 UTC
CVE-2026-98389
baja
kernel: drm/amdgpu: skip gfx switch_power_profile during GPU resetbuild de las 01:25 UTC
CVE-2026-100229
baja
gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound checkbuild de las 01:25 UTC
CVE-2026-109278
baja
ImageMagick: ImageMagick: Denial of Service via memory leak in wavelet-denoise operationbuild de las 01:25 UTC
CVE-2026-105081
baja
ImageMagick: ImageMagick: Security policy bypass via symbolic linkbuild de las 01:25 UTC
CVE-2026-98356
baja
kernel: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setupbuild de las 01:25 UTC
CVE-2026-104029
baja
sssd: sssd: Denial of Service via out-of-bounds read in autofs responderbuild de las 01:25 UTC
CVE-2026-105712
baja
gnupg2: gnupg: Arbitrary file overwrite via symlink traversal in gpgtarbuild de las 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.