Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98859
moyenne
kernel: kernel: Denial of service via use-after-free in HID multitouch driverbuild de 07:11 UTC
CVE-2026-98852
moyenne
kernel: net: extend IPv6 exthdr detection of tunneled packetsbuild de 07:11 UTC
CVE-2026-98850
moyenne
kernel: net/packet: prevent TX_RING byte count overflowbuild de 07:11 UTC
CVE-2026-98849
moyenne
kernel: pfcp: fix socket lifetime on netdevice registration failurebuild de 07:11 UTC
CVE-2026-98847
moyenne
kernel: rtc: spear: initialize IRQ state before requesting alarm IRQbuild de 07:11 UTC
CVE-2026-98843
moyenne
kernel: netfs: zero gaps in read-gaps folio to avoid writing back stale databuild de 07:11 UTC
CVE-2026-98840
moyenne
kernel: kernel: Denial of Service via use-after-free in virtual console screen driverbuild de 07:11 UTC
CVE-2026-98838
moyenne
kernel: vt: skip screen update for DEC alignment test on backgroup consolesbuild de 07:11 UTC
CVE-2026-98830
moyenne
kernel: kernel: Denial of Service via buffer overflow in WFx Wi-Fi driverbuild de 07:11 UTC
CVE-2026-98828
moyenne
kernel: wifi: ath9k: reject short WMI command responsesbuild de 07:11 UTC
CVE-2026-98822
moyenne
kernel: wifi: mac80211: prevent AP VLAN tx from other interfacesbuild de 07:11 UTC
CVE-2026-98821
moyenne
kernel: block: reject polled dio with user integrity metadatabuild de 07:11 UTC
CVE-2026-98816
moyenne
kernel: bpf: Fix overflow of jump offset in constant blindingbuild de 07:11 UTC
CVE-2026-98812
moyenne
kernel: net/mctp: publish the mctp_dev only after it is initialisedbuild de 07:11 UTC
CVE-2026-98810
moyenne
kernel: wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()build de 07:11 UTC
CVE-2026-98808
moyenne
kernel: net: systemport: Fix buffer overflow in bcm_sysport_get_stats()build de 07:11 UTC
CVE-2026-98806
moyenne
kernel: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabledbuild de 07:11 UTC
CVE-2026-98801
moyenne
kernel: kernel: Denial of Service via improper socket memory reservation handlingbuild de 07:11 UTC
CVE-2026-98789
moyenne
kernel: bpf: Fix objects stuck in free_by_rcu_ttracebuild de 07:11 UTC
CVE-2026-98785
moyenne
kernel: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspendbuild de 07:11 UTC
CVE-2026-98778
moyenne
kernel: binder: fix is_failure flag for superseded transaction cleanupbuild de 07:11 UTC
CVE-2026-98775
moyenne
kernel: nitro_enclaves: fix use-after-free on SLOT_ALLOC failurebuild de 07:11 UTC
CVE-2026-98773
moyenne
kernel: USB: cdc-acm: skip URB restart in port_shutdown if disconnectedbuild de 07:11 UTC
CVE-2026-98772
moyenne
kernel: USB: serial: fix port tear down use-after-freebuild de 07:11 UTC
CVE-2026-98768
moyenne
kernel: kernel: Denial of Service via race condition during ANX7411 driver removalbuild de 07:11 UTC
CVE-2026-98761
moyenne
kernel: usb: typec: tcpm: recover after failure to start the frs amsbuild de 07:11 UTC
CVE-2026-98760
moyenne
kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()build de 07:11 UTC
CVE-2026-98759
moyenne
kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()build de 07:11 UTC
CVE-2026-98753
moyenne
kernel: tty: tty_port: restore TTY_IO_ERROR on activation failurebuild de 07:11 UTC
CVE-2026-98750
moyenne
kernel: kernel: use-after-free via race condition in TTY device registrationbuild de 07:11 UTC
CVE-2026-98745
moyenne
kernel: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systemsbuild de 07:11 UTC
CVE-2026-98744
moyenne
kernel: ASoC: codecs: max98363: fix uninitialized stream_config->typebuild de 07:11 UTC
CVE-2026-98743
moyenne
kernel: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->typebuild de 07:11 UTC
CVE-2026-98739
moyenne
kernel: Bluetooth: RFCOMM: Fix initial port reference racebuild de 07:11 UTC
CVE-2026-98736
moyenne
kernel: Bluetooth: hci_conn: Lock parent access during enhanced SCO setupbuild de 07:11 UTC
CVE-2026-98733
moyenne
kernel: kernel: Denial of Service via use-after-free in Bluetooth ISO packet queueingbuild de 07:11 UTC
CVE-2026-98731
moyenne
kernel: Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()build de 07:11 UTC
CVE-2026-98729
moyenne
kernel: x86/mm: Don't apply va_align to hugetlb mappings on AMD F15hbuild de 07:11 UTC
CVE-2026-98727
moyenne
kernel: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is knownbuild de 07:11 UTC
CVE-2026-98726
moyenne
kernel: nvme-multipath: fix underflow in ANA log bounds checksbuild de 07:11 UTC
CVE-2026-98724
moyenne
kernel: nvmet: pci-epf: reject too-short SGL segmentsbuild de 07:11 UTC
CVE-2026-98723
moyenne
kernel: nvmet: copy the hostid into the ctrl before creating PR pc_refsbuild de 07:11 UTC
CVE-2026-98719
moyenne
kernel: KVM: SEV: Nullify "have run CPUs" mask pointer when freeing itbuild de 07:11 UTC
CVE-2026-98717
moyenne
kernel: KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummybuild de 07:11 UTC
CVE-2026-98709
moyenne
kernel: kernel: mac80211: Denial of Service via use-after-free during channel switchingbuild de 07:11 UTC
CVE-2026-98705
moyenne
kernel: wifi: mac80211: account proxy paths against the mesh path limitbuild de 07:11 UTC
CVE-2026-98698
moyenne
kernel: wifi: mac80211: handle empty FILS association request payloadbuild de 07:11 UTC
CVE-2026-98696
moyenne
kernel: USB: serial: fix driver deregistration orderbuild de 07:11 UTC
CVE-2026-98695
moyenne
kernel: USB: serial: fix ioctl hangup racebuild de 07:11 UTC
CVE-2026-98694
moyenne
kernel: thunderbolt: Fix KASAN reported use-after-free when request is canceledbuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.