Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98368
moyenne
kernel: esp: downgrade zerocopy managed frags before mutating skb fragsbuild de 07:11 UTC
CVE-2026-98367
moyenne
kernel: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_acceptbuild de 07:11 UTC
CVE-2026-98366
moyenne
kernel: RDMA/rxe: validate access flags before swapping the MR's PDbuild de 07:11 UTC
CVE-2026-98365
moyenne
kernel: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB accessbuild de 07:11 UTC
CVE-2026-98361
moyenne
kernel: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write pathsbuild de 07:11 UTC
CVE-2026-98360
moyenne
kernel: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeedsbuild de 07:11 UTC
CVE-2026-98358
moyenne
kernel: IB/iser: reject a remote invalidation of an unregistered directionbuild de 07:11 UTC
CVE-2026-98357
moyenne
kernel: IB/isert: wait for deferred control PDU completions before releasing the connectionbuild de 07:11 UTC
CVE-2026-98355
moyenne
kernel: RDMA/rtrs: guard against null kobj namebuild de 07:11 UTC
CVE-2026-98354
moyenne
kernel: RDMA/mad: Fix receive buffer leak when PKey enforcement failsbuild de 07:11 UTC
CVE-2026-98353
moyenne
kernel: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tablesbuild de 07:11 UTC
CVE-2026-98352
moyenne
kernel: RDMA/rtrs-clt: Fix CQ pool leak when connect is interruptedbuild de 07:11 UTC
CVE-2026-98351
moyenne
kernel: wifi: virt_wifi: free skb when disconnectedbuild de 07:11 UTC
CVE-2026-98350
moyenne
kernel: wifi: brcmfmac: cyw: pass PMKID to firmware if presentbuild de 07:11 UTC
CVE-2026-98349
moyenne
kernel: wifi: libipw: reject too-short beacon and probe responsesbuild de 07:11 UTC
CVE-2026-98348
moyenne
kernel: wifi: libipw: reject too-short association responsesbuild de 07:11 UTC
CVE-2026-98347
moyenne
kernel: IB/IPoIB: Avoid restoring OPER_UP after multicast flushbuild de 07:11 UTC
CVE-2026-98343
moyenne
kernel: dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()build de 07:11 UTC
CVE-2026-98342
moyenne
kernel: dmaengine: wait for RCU readers before releasing dma_devicebuild de 07:11 UTC
CVE-2026-98341
moyenne
kernel: wifi: cfg80211: don't free driver-owned scan requestsbuild de 07:11 UTC
CVE-2026-98340
moyenne
kernel: wifi: cfg80211: only group hidden BSSes with beacon entriesbuild de 07:11 UTC
CVE-2026-98339
moyenne
kernel: wifi: cfg80211: don't filter by BSS type when removing stale entriesbuild de 07:11 UTC
CVE-2026-98336
moyenne
kernel: wifi: mac80211: don't offload TC setup on AP_VLAN interfacesbuild de 07:11 UTC
CVE-2026-98335
moyenne
kernel: wifi: mac80211: abort chanswitch when leaving a meshbuild de 07:11 UTC
CVE-2026-98333
moyenne
kernel: wifi: mac80211: reset the LED state when ifup failsbuild de 07:11 UTC
CVE-2026-98331
moyenne
kernel: wifi: mac80211: unlist vifs when their netdev is unregisteredbuild de 07:11 UTC
CVE-2026-98330
moyenne
kernel: wifi: cfg80211: get the wiphy out of a dying network namespacebuild de 07:11 UTC
CVE-2026-98327
moyenne
kernel: wifi: mac80211: mesh: reset the CSA state when leavingbuild de 07:11 UTC
CVE-2026-98324
moyenne
kernel: dmaengine: pxa: fix double counting of the hw descriptorsbuild de 07:11 UTC
CVE-2026-98322
moyenne
kernel: netfilter: nft_nat: fully initialise new_addr in netmap setupbuild de 07:11 UTC
CVE-2026-98316
moyenne
In the Linux kernel, the following vulnerability has been resolved: A ...build de 07:11 UTC
CVE-2026-98314
moyenne
kernel: ALSA: pcm: set timer->private_data before registering the PCM timerbuild de 07:11 UTC
CVE-2026-98313
moyenne
kernel: drm/msm/dp: skip PUSH_IDLE when the link was never enabledbuild de 07:11 UTC
CVE-2026-98312
moyenne
kernel: ALSA: 6fire: fix OOB write from device-reported iso lengthbuild de 07:11 UTC
CVE-2026-98311
moyenne
kernel: wifi: virt_wifi: don't transfer operstate before registerbuild de 07:11 UTC
CVE-2026-98310
moyenne
kernel: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memorybuild de 07:11 UTC
CVE-2026-98309
moyenne
kernel: drm/vc4: Use managed KMS polling to fix UAF on unbindbuild de 07:11 UTC
CVE-2026-98306
moyenne
kernel: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulationbuild de 07:11 UTC
CVE-2026-98305
moyenne
kernel: net: dsa: mxl862xx: disable the stats poll on teardownbuild de 07:11 UTC
CVE-2026-98303
moyenne
kernel: ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookupbuild de 07:11 UTC
CVE-2026-98302
moyenne
kernel: net: fddi: skfp: fix NULL deref when setting the MAC address while downbuild de 07:11 UTC
CVE-2026-98301
moyenne
kernel: net: bridge: mst: move switchdev call outside rcubuild de 07:11 UTC
CVE-2026-98300
moyenne
kernel: tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv()build de 07:11 UTC
CVE-2026-98299
moyenne
kernel: tcp: do not let tcp_rmem be set below 4096build de 07:11 UTC
CVE-2026-98298
moyenne
kernel: dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()build de 07:11 UTC
CVE-2026-98296
moyenne
kernel: Bluetooth: btintel_pcie: validate TX skb length in send_syncbuild de 07:11 UTC
CVE-2026-98295
moyenne
kernel: Bluetooth: coredump: Quiesce dump work on unregisterbuild de 07:11 UTC
CVE-2026-98294
moyenne
kernel: Bluetooth: hci_qca: Do not write to the serial port after it is closedbuild de 07:11 UTC
CVE-2026-98293
moyenne
kernel: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()build de 07:11 UTC
CVE-2026-98292
moyenne
kernel: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct accessbuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.