Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98543
moyenne
kernel: bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdirbuild de 07:11 UTC
CVE-2026-98541
moyenne
kernel: fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECTbuild de 07:11 UTC
CVE-2026-98538
moyenne
kernel: writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodesbuild de 07:11 UTC
CVE-2026-98537
moyenne
kernel: workqueue: Fix NULL current_pwq deref in flush dependency checkbuild de 07:11 UTC
CVE-2026-98536
moyenne
kernel: writeback: report a Tasks-RCU quiescent state per cgwb drain passbuild de 07:11 UTC
CVE-2026-98526
moyenne
kernel: llc: reserve device headroom for allocated framesbuild de 07:11 UTC
CVE-2026-98525
moyenne
kernel: mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()build de 07:11 UTC
CVE-2026-98522
moyenne
kernel: drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()build de 07:11 UTC
CVE-2026-98521
moyenne
kernel: drm/i915: fix incorrect RCU teardown orderbuild de 07:11 UTC
CVE-2026-98518
moyenne
kernel: drm/nouveau/dmem: pin VRAM for the whole registered rangebuild de 07:11 UTC
CVE-2026-98517
moyenne
kernel: drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEMbuild de 07:11 UTC
CVE-2026-98515
moyenne
kernel: drm/nouveau: fix double-free in nvif_vmm_dtorbuild de 07:11 UTC
CVE-2026-98512
moyenne
kernel: drm/nouveau: RCU-free the scheduler-containing nouveau_schedbuild de 07:11 UTC
CVE-2026-98511
moyenne
kernel: drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()build de 07:11 UTC
CVE-2026-98510
moyenne
kernel: drm/xe/vm: nuke PTs only after unlinking contested VMAsbuild de 07:11 UTC
CVE-2026-98508
moyenne
kernel: drm/virtio: fix NULL pointer dereference on fence allocation failurebuild de 07:11 UTC
CVE-2026-98507
moyenne
kernel: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publishbuild de 07:11 UTC
CVE-2026-98506
moyenne
kernel: mm/hugetlb: do not dissolve gigantic pages without runtime supportbuild de 07:11 UTC
CVE-2026-98501
moyenne
kernel: HID: alps: fix use-after-free on input2 registration failurebuild de 07:11 UTC
CVE-2026-98499
moyenne
kernel: HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()build de 07:11 UTC
CVE-2026-98497
moyenne
kernel: net/mlx5e: fix swapped IPv6 IPsec policy masksbuild de 07:11 UTC
CVE-2026-98495
moyenne
kernel: net: arp: terminate device name before lookupbuild de 07:11 UTC
CVE-2026-98494
moyenne
kernel: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean readbuild de 07:11 UTC
CVE-2026-98489
moyenne
kernel: net: atl1c: fix soft lockup on out-of-range tpd_cons readbuild de 07:11 UTC
CVE-2026-98488
moyenne
kernel: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean readbuild de 07:11 UTC
CVE-2026-98487
moyenne
kernel: net: bridge: mdb: restart port group walk after deletionbuild de 07:11 UTC
CVE-2026-98485
moyenne
kernel: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds readbuild de 07:11 UTC
CVE-2026-98482
moyenne
kernel: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()build de 07:11 UTC
CVE-2026-98481
moyenne
kernel: nfc: port100: reject frames whose declared length exceeds the received databuild de 07:11 UTC
CVE-2026-98479
moyenne
kernel: scsi: libiscsi_tcp: Check the data direction of a Data-In PDUbuild de 07:11 UTC
CVE-2026-98478
moyenne
kernel: scsi: ufs: core: Keep internal commands dispatchable during error handlingbuild de 07:11 UTC
CVE-2026-98477
moyenne
kernel: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()build de 07:11 UTC
CVE-2026-98476
moyenne
kernel: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()build de 07:11 UTC
CVE-2026-98475
moyenne
kernel: s390/cmf: Fix virtual vs physical address confusionbuild de 07:11 UTC
CVE-2026-98471
moyenne
kernel: KVM: SEV: Do cache maintenance on the source VM during intra-host migrationbuild de 07:11 UTC
CVE-2026-98470
moyenne
kernel: KVM: arm64: Don't WARN on an unknown VM ioctl in protected modebuild de 07:11 UTC
CVE-2026-98469
moyenne
kernel: KVM: arm64: Fix AArch32 DBGBXVR<n> handlingbuild de 07:11 UTC
CVE-2026-98467
moyenne
kernel: KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown racebuild de 07:11 UTC
CVE-2026-98465
moyenne
kernel: RISC-V: KVM: Serialize IMSIC attributes with vCPU migrationbuild de 07:11 UTC
CVE-2026-98464
moyenne
kernel: RISC-V: KVM: Synchronize hrtimer callback during teardownbuild de 07:11 UTC
CVE-2026-98461
moyenne
kernel: Bluetooth: hci_sock: validate event length before filteringbuild de 07:11 UTC
CVE-2026-98460
moyenne
kernel: Bluetooth: hci_sock: reject out-of-range OCF valuesbuild de 07:11 UTC
CVE-2026-98455
moyenne
kernel: Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFObuild de 07:11 UTC
CVE-2026-98454
moyenne
kernel: smb: client: fix create context out-of-bounds readsbuild de 07:11 UTC
CVE-2026-98453
moyenne
kernel: smb: client: close handle after create-context parsing failurebuild de 07:11 UTC
CVE-2026-98452
moyenne
kernel: smb: client: clean up failed cached directory opensbuild de 07:11 UTC
CVE-2026-98445
moyenne
kernel: xfs: don't let memory failures leak blocks and kill repairsbuild de 07:11 UTC
CVE-2026-98443
moyenne
kernel: xfs: fix cursor and pointer handling when recovering iunlink bucketsbuild de 07:11 UTC
CVE-2026-98436
moyenne
In the Linux kernel, the following vulnerability has been resolved: a ...build de 07:11 UTC
CVE-2026-98434
moyenne
kernel: sysctl: Check range in proc_dointvec_ms_jiffies_minmaxbuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.