Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98893
moyenne
kernel: firmware: arm_scmi: Validate SENSOR_UPDATE payload sizebuild de 07:13 UTC
CVE-2026-98892
moyenne
kernel: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload sizebuild de 07:13 UTC
CVE-2026-98891
moyenne
kernel: wifi: mac80211: validate deauth frame length before reason accessbuild de 07:13 UTC
CVE-2026-98890
moyenne
kernel: wifi: libertas: reject short monitor TX framesbuild de 07:13 UTC
CVE-2026-98889
moyenne
kernel: wifi: iwlwifi: mvm: fix sched scan IE sizingbuild de 07:13 UTC
CVE-2026-98888
moyenne
kernel: arm64: kprobes: Allow reentering kprobes while single-steppingbuild de 07:13 UTC
CVE-2026-98887
moyenne
kernel: wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFObuild de 07:13 UTC
CVE-2026-98886
moyenne
kernel: drm/gma500: return errors from Oaktrail HDMI I2C readsbuild de 07:13 UTC
CVE-2026-98884
moyenne
kernel: mmc: core: Add validation for host-provided max_segsbuild de 07:13 UTC
CVE-2026-98883
moyenne
kernel: serial: 8250_port: recognize UPIO_AUbuild de 07:13 UTC
CVE-2026-98882
moyenne
kernel: media: chips-media: wave5: Add range checks for dec_output_infobuild de 07:13 UTC
CVE-2026-98881
moyenne
kernel: net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()build de 07:13 UTC
CVE-2026-98880
moyenne
kernel: ntfs3: handle set_blocksize failuresbuild de 07:13 UTC
CVE-2026-98879
moyenne
kernel: isofs: handle set_blocksize failuresbuild de 07:13 UTC
CVE-2026-98878
moyenne
kernel: irqchip/gic-v5: Immediately exec priority drop following activatebuild de 07:13 UTC
CVE-2026-98877
moyenne
kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probedbuild de 07:13 UTC
CVE-2026-115360
moyenne
github.com/openbao/openbao: OpenBao: Open redirect via OIDC identity provider user interfacebuild de 07:13 UTC
CVE-2026-93237
moyenne
kernel: LoongArch: Add DIRECT_MAP_PHYSMEM_END definitionbuild de 07:13 UTC
CVE-2026-80728
moyenne
kernel: Revert "drm/amdgpu: fix aperture mapping leak"build de 07:13 UTC
CVE-2026-43670
moyenne
A Content Security Policy bypass was addressed with improved enforceme ...build de 07:13 UTC
CVE-2024-43768
moyenne
In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds ...build de 07:13 UTC
CVE-2026-116152
moyenne
ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoderbuild de 01:25 UTC
CVE-2026-106074
moyenne
nodejs: nodejs: predictable random values via snapshot entropy cache reusebuild de 01:25 UTC
CVE-2026-106072
moyenne
nodejs: nodejs: Authentication bypass via non-canonical IPv4 hostname verificationbuild de 01:25 UTC
CVE-2026-105481
moyenne
nodejs: nodejs: Response desynchronization via improper HTTP keep-alive connection reusebuild de 01:25 UTC
CVE-2026-55889
moyenne
xdg-desktop-portal: xdg-desktop-portal: unauthorized data disclosure via predictable token generationbuild de 01:25 UTC
CVE-2026-98876
moyenne
kernel: host1x: bus: Fix missing ops null check in error teardownbuild de 01:25 UTC
CVE-2026-98875
moyenne
kernel: drm/nouveau/gsp: add SEC2 to GA100 chip tablebuild de 01:25 UTC
CVE-2026-98872
moyenne
kernel: freevxfs: don't BUG() on unknown typed-extent typebuild de 01:25 UTC
CVE-2026-98871
moyenne
kernel: crypto: ccp - Fix possible deadlock in SEV init failure pathbuild de 01:25 UTC
CVE-2026-98870
moyenne
kernel: ksmbd: remove stale channels from all sessions on teardownbuild de 01:25 UTC
CVE-2026-115327
moyenne
libyang: libyang: Denial of Service via crafted NETCONF RPC action envelopebuild de 01:25 UTC
CVE-2026-115207
moyenne
patch: Filename validation bypass in reversal fallback allows file creation outside the working directorybuild de 01:25 UTC
CVE-2026-92822
moyenne
libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd YAMLbuild de 01:25 UTC
CVE-2026-114038
moyenne
device-mapper-multipath: device-mapper-multipath: Information disclosure via malformed format stringbuild de 01:25 UTC
CVE-2026-108518
moyenne
perl-dbi: perl-dbi: Denial of Service via type confusion in dbi_profilebuild de 01:25 UTC
CVE-2026-92539
moyenne
grafana: Grafana: Unauthorized cross-organization user management via the SCIM APIbuild de 01:25 UTC
CVE-2026-113680
moyenne
harfbuzz: harfbuzz: Denial of Service via crafted font in WebAssembly shaperbuild de 01:25 UTC
CVE-2026-113679
moyenne
harfbuzz: HarfBuzz: Out-of-bounds write via crafted font in WebAssembly shaperbuild de 01:25 UTC
CVE-2026-113496
moyenne
cockpit-machines: VNC console password disclosure through virt-xml command-line argumentsbuild de 01:25 UTC
CVE-2026-113495
moyenne
cockpit-machines: RHSM access-token disclosure through image helper command-line argumentsbuild de 01:25 UTC
CVE-2026-101201
moyenne
qt5-qtbase: qt6-qt5compat: qt: Denial of Service via out-of-bounds read in QBinaryJsonbuild de 01:25 UTC
CVE-2026-8168
moyenne
qt5-qtsvg: qt6-qtsvg: qt: Denial of Service via deeply nested SVG elementsbuild de 01:25 UTC
CVE-2026-112283
moyenne
libbluray: libbluray: Denial of Service via uncontrolled memory allocation in clpi_parsebuild de 01:25 UTC
CVE-2026-112276
moyenne
netpbm: netpbm: Denial of Service via out-of-bounds read in rasttopnmbuild de 01:25 UTC
CVE-2026-112275
moyenne
netpbm: netpbm: Denial of Service via heap-based buffer overflow in rasttopnmbuild de 01:25 UTC
CVE-2026-98868
moyenne
kernel: dm-pcache: reject a kset that overruns its segmentbuild de 01:25 UTC
CVE-2026-98866
moyenne
kernel: sched/cache: Introduce task_struct->sched_cache_grp to fix UAFbuild de 01:25 UTC
CVE-2026-98864
moyenne
kernel: sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a taskbuild de 01:25 UTC
CVE-2026-98863
moyenne
kernel: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages failsbuild de 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.