Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98291
moyenne
kernel: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submitbuild de 07:11 UTC
CVE-2026-98290
moyenne
kernel: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanupbuild de 07:11 UTC
CVE-2026-98288
moyenne
kernel: net: stmmac: fix TSO header length truncationbuild de 07:11 UTC
CVE-2026-98287
moyenne
kernel: pppoatm: ensure a writable skb header and linear databuild de 07:11 UTC
CVE-2026-98286
moyenne
kernel: drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardownbuild de 07:11 UTC
CVE-2026-98284
moyenne
kernel: netlink: do not free nlk->groups while lockless readers can use itbuild de 07:11 UTC
CVE-2026-98283
moyenne
kernel: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()build de 07:11 UTC
CVE-2026-98282
moyenne
kernel: powerpc/iommu: Fix the overflow validation in iommu_tce_check_iobabuild de 07:11 UTC
CVE-2026-98281
moyenne
kernel: futex: Also allocate private hash on vfork()build de 07:11 UTC
CVE-2026-98280
moyenne
kernel: drm/xe/i2c: Disable IRQ on unbindbuild de 07:11 UTC
CVE-2026-98279
moyenne
kernel: btrfs: handle lack of space when cleaning up verity itemsbuild de 07:11 UTC
CVE-2026-98277
moyenne
kernel: eth: fbnic: ring the doorbell if a burst ends in a dropbuild de 07:11 UTC
CVE-2026-98276
moyenne
kernel: net: lock the socket in sock_gettstamp()build de 07:11 UTC
CVE-2026-98275
moyenne
In the Linux kernel, the following vulnerability has been resolved: n ...build de 07:11 UTC
CVE-2026-98274
moyenne
In the Linux kernel, the following vulnerability has been resolved: n ...build de 07:11 UTC
CVE-2026-98273
moyenne
kernel: x86/kprobes: Fix crash when probing CS CALL instructionsbuild de 07:11 UTC
CVE-2026-98272
moyenne
kernel: net: mvpp2: prevent buffer overflow in page_pool allocationbuild de 07:11 UTC
CVE-2026-98271
moyenne
kernel: net: skbuff: do not leave stale header offsets after pskb_carve()build de 07:11 UTC
CVE-2026-98269
moyenne
kernel: btrfs: abort transaction on failure to update inode for hole punching and reflinkingbuild de 07:11 UTC
CVE-2026-98267
moyenne
kernel: 9p: Fix v9fs_issue_write() to update i_size and remote_i_sizebuild de 07:11 UTC
CVE-2026-98266
moyenne
kernel: ALSA: core: Fix potential UAF after asynchronous card releasebuild de 07:11 UTC
CVE-2026-98265
moyenne
kernel: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacitybuild de 07:11 UTC
CVE-2026-98264
moyenne
kernel: ALSA: virtio: reset device before deleting virtqueuesbuild de 07:11 UTC
CVE-2026-98262
moyenne
kernel: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLYbuild de 07:11 UTC
CVE-2026-98261
moyenne
kernel: cifs: Fix server use-after-free in cifs_chan_skip_or_disable()build de 07:11 UTC
CVE-2026-98258
moyenne
kernel: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry listbuild de 07:11 UTC
CVE-2026-98257
moyenne
kernel: rds: ib: use rds_conn_drop() on protocol version mismatchbuild de 07:11 UTC
CVE-2026-98255
moyenne
kernel: tcp: exclude old ACKs from tcp fast pathbuild de 07:11 UTC
CVE-2026-98254
moyenne
kernel: swiotlb: use the adjusted address for the highmem page lookupbuild de 07:11 UTC
CVE-2026-98253
moyenne
kernel: RDMA/ucma: Serialize join and leave on copy_to_user failurebuild de 07:11 UTC
CVE-2026-98252
moyenne
kernel: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()build de 07:11 UTC
CVE-2026-98251
moyenne
kernel: openvswitch: avoid reallocating confirmed conntrack labelsbuild de 07:11 UTC
CVE-2026-98250
moyenne
kernel: nfsd: fix handling of NFSEXP_PNFS in the netlink codepathbuild de 07:11 UTC
CVE-2026-98249
moyenne
kernel: arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvcbuild de 07:11 UTC
CVE-2026-98248
moyenne
kernel: arm64: percpu: Fix LSE operations on {8,16}-bit typesbuild de 07:11 UTC
CVE-2026-98247
moyenne
kernel: Bluetooth: hci_codec: validate vendor codec count lengthbuild de 07:11 UTC
CVE-2026-98246
moyenne
kernel: Bluetooth: hci_sync: Serialize local codec list cleanupbuild de 07:11 UTC
CVE-2026-98245
moyenne
kernel: btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()build de 07:11 UTC
CVE-2026-98244
moyenne
kernel: btrfs: clear free space tree creation state on rebuild failurebuild de 07:11 UTC
CVE-2026-98243
moyenne
kernel: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3build de 07:11 UTC
CVE-2026-98242
moyenne
kernel: dma-buf: Fix silent overflow for phys vec to sgtbuild de 07:11 UTC
CVE-2026-98241
moyenne
kernel: ipv6: xfrm: use full sockets in local error pathsbuild de 07:11 UTC
CVE-2026-98239
moyenne
kernel: net: lan743x: fix RX checksum use-after-freebuild de 07:11 UTC
CVE-2026-98238
moyenne
kernel: net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()build de 07:11 UTC
CVE-2026-98236
moyenne
kernel: net: wwan: mhi_wwan_mbim: check skb_copy_bits() return valuebuild de 07:11 UTC
CVE-2026-98232
moyenne
In the Linux kernel, the following vulnerability has been resolved: s ...build de 07:11 UTC
CVE-2026-98231
moyenne
kernel: xfrm: serialize state GC with device state flushbuild de 07:11 UTC
CVE-2026-98230
moyenne
kernel: xfrm: use hlist_del_init_rcu for state_cache and state_cache_inputbuild de 07:11 UTC
CVE-2026-98229
moyenne
kernel: xfrm: save input state data before secpath resetsbuild de 07:11 UTC
CVE-2026-98228
moyenne
kernel: mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQbuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.