Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98693
moyenne
kernel: thunderbolt: Hold a router reference for each allocated HopIDbuild de 07:11 UTC
CVE-2026-98689
moyenne
kernel: thunderbolt: Don't access a DP tunnel after its DPRX read was canceledbuild de 07:11 UTC
CVE-2026-98688
moyenne
kernel: thunderbolt: Fix NULL dereference in tb_remove_work()build de 07:11 UTC
CVE-2026-98681
moyenne
kernel: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW racesbuild de 07:11 UTC
CVE-2026-98672
moyenne
kernel: iio: adc: stm32-adc: fix possible division by zero in processed channelbuild de 07:11 UTC
CVE-2026-98662
moyenne
kernel: kernel: Denial of Service via use-after-free during gp2ap020a00f device removalbuild de 07:11 UTC
CVE-2026-98653
moyenne
kernel: KVM: s390: Fix _gaccess_shadow_fault()build de 07:11 UTC
CVE-2026-98651
moyenne
kernel: KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()build de 07:11 UTC
CVE-2026-98650
moyenne
kernel: KVM: s390: Fix potential races in dat skey functionsbuild de 07:11 UTC
CVE-2026-98649
moyenne
kernel: KVM: s390: Fix race in _destroy_pages_crste()build de 07:11 UTC
CVE-2026-98648
moyenne
kernel: s390/uv: Prevent potential out-of-bounds readbuild de 07:11 UTC
CVE-2026-98646
moyenne
kernel: tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF contextbuild de 07:11 UTC
CVE-2026-98644
moyenne
kernel: bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()build de 07:11 UTC
CVE-2026-98640
moyenne
kernel: HID: amd_sfh: Validate PCI BAR size before mappingbuild de 07:11 UTC
CVE-2026-98637
moyenne
kernel: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failurebuild de 07:11 UTC
CVE-2026-98635
moyenne
kernel: scsi: block: Fix zones_cond out-of-bounds write on zone reportbuild de 07:11 UTC
CVE-2026-98634
moyenne
kernel: scsi: sd_zbc: Reject disks with too many zonesbuild de 07:11 UTC
CVE-2026-98631
moyenne
kernel: xsk: Use a 32-bit compare in xsk_map_gen_lookupbuild de 07:11 UTC
CVE-2026-98630
moyenne
kernel: eth: fbnic: Fix payload page pool error cleanupbuild de 07:11 UTC
CVE-2026-98622
moyenne
kernel: net/sched: act_ct: don't WARN on benign flow_offload_alloc() failurebuild de 07:11 UTC
CVE-2026-98613
moyenne
kernel: bpf: Bound ownership depth through local kptrs and graph rootsbuild de 07:11 UTC
CVE-2026-98612
moyenne
kernel: net: usb: catc: bound the RX packet length in catc_rx_done()build de 07:11 UTC
CVE-2026-98611
moyenne
kernel: bpf: Check params size before reading reserved fieldsbuild de 07:11 UTC
CVE-2026-98610
moyenne
kernel: net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budgetbuild de 07:11 UTC
CVE-2026-98606
moyenne
kernel: drm/virtio: release the GEM object on virtio_gpu_vram_create() errorsbuild de 07:11 UTC
CVE-2026-98605
moyenne
kernel: drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attachbuild de 07:11 UTC
CVE-2026-98601
moyenne
kernel: Bluetooth: btintel_pcie: validate device-supplied DMA indicesbuild de 07:11 UTC
CVE-2026-98598
moyenne
kernel: ipv6: Prevent rt6_insert_exception() for dying fib6_infobuild de 07:11 UTC
CVE-2026-98597
moyenne
kernel: net: usb: sr9700: include receive overhead in the length checkbuild de 07:11 UTC
CVE-2026-98596
moyenne
kernel: ipv6: Fix dst leak for uncached routesbuild de 07:11 UTC
CVE-2026-98592
moyenne
kernel: net: spacemit: clear TX descriptor on fragment mapping failurebuild de 07:11 UTC
CVE-2026-98591
moyenne
kernel: bpf: Fix bounds check for skb-backed dynptrsbuild de 07:11 UTC
CVE-2026-98588
moyenne
kernel: bpf, sockmap: Reject max_entries > INT_MAX in sock_map_allocbuild de 07:11 UTC
CVE-2026-98585
moyenne
kernel: eth: fbnic: Avoid rounding zero ring sizesbuild de 07:11 UTC
CVE-2026-98582
moyenne
kernel: nfc: st21nfca: validate received frame sizebuild de 07:11 UTC
CVE-2026-98581
moyenne
kernel: nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()build de 07:11 UTC
CVE-2026-98580
moyenne
kernel: nfc: llcp: Fix race condition in accept_queue lifecyclebuild de 07:11 UTC
CVE-2026-98577
moyenne
kernel: nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()build de 07:11 UTC
CVE-2026-98575
moyenne
kernel: nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()build de 07:11 UTC
CVE-2026-98569
moyenne
kernel: ip_gre: Reject enabling collect metadata through changelinkbuild de 07:11 UTC
CVE-2026-98567
moyenne
kernel: net: xps: reject an out of range traffic classbuild de 07:11 UTC
CVE-2026-98561
moyenne
kernel: nfp: hold IPsec RX state under the XArray lockbuild de 07:11 UTC
CVE-2026-98558
moyenne
kernel: net: flush skb_defer_nodes in dev_cpu_dead()build de 07:11 UTC
CVE-2026-98556
moyenne
kernel: gve: DQO: reject TSO packets with an out of range MSSbuild de 07:11 UTC
CVE-2026-98555
moyenne
kernel: llc: fix skb UAF and leaks on llc_mac_hdr_init() failurebuild de 07:11 UTC
CVE-2026-98554
moyenne
kernel: vlan: ensure sufficient headroom in vlan_dev_hard_header()build de 07:11 UTC
CVE-2026-98549
moyenne
kernel: tcp: prevent collapsing skbs across boundary in rtx queuebuild de 07:11 UTC
CVE-2026-98547
moyenne
kernel: af_packet: fix integer overflow in prb_calc_retire_blk_tmo()build de 07:11 UTC
CVE-2026-98546
moyenne
kernel: arm64/boot: Disable trapping of PMZR_EL0 writes to EL2build de 07:11 UTC
CVE-2026-98545
moyenne
kernel: ata: libata-scsi: bound the ATA passthru sense descriptor writesbuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.