Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98227
moyenne
kernel: memstick: ms_block: destroy io_queue workqueue on removalbuild de 07:11 UTC
CVE-2026-98226
moyenne
kernel: mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage countbuild de 07:11 UTC
CVE-2026-98225
moyenne
kernel: mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmembuild de 07:11 UTC
CVE-2026-98221
moyenne
kernel: KEYS: trusted: Fix tpm2_load_cmd() boundary checkbuild de 07:11 UTC
CVE-2026-98220
moyenne
kernel: sched_ext: Fix NULL sched deref in kfunc sub-sched error pathsbuild de 07:11 UTC
CVE-2026-98219
moyenne
kernel: sched_ext: Close the pre-enable ops error claim windowbuild de 07:11 UTC
CVE-2026-98218
moyenne
kernel: i2c: atr: fix dangling adapter pointer on add failurebuild de 07:11 UTC
CVE-2026-98217
moyenne
kernel: IB/mlx4: Fix use-after-free on pkey sysfs registration failurebuild de 07:11 UTC
CVE-2026-98216
moyenne
kernel: IB/hfi1: Fix the PIO_CRED credit-return mmapbuild de 07:11 UTC
CVE-2026-98215
moyenne
kernel: selinux: preserve user SID across nested backing filesbuild de 07:11 UTC
CVE-2026-98214
moyenne
kernel: selinux: recheck intermediate backing files on mprotect()build de 07:11 UTC
CVE-2026-98213
moyenne
kernel: mmc: core: Cancel SDIO IRQ work before freeing hostbuild de 07:11 UTC
CVE-2026-98212
moyenne
kernel: mmc: hsq: Fix use-after-free in retry workbuild de 07:11 UTC
CVE-2026-98211
moyenne
kernel: mmc: mmci: Fix use-after-free in busy-timeout workbuild de 07:11 UTC
CVE-2026-98210
moyenne
kernel: mmc: mxcmmc: cancel data work and watchdog on removebuild de 07:11 UTC
CVE-2026-98209
moyenne
kernel: mmc: sdhci-of-aspeed: Remove children before releasing SDC resourcesbuild de 07:11 UTC
CVE-2026-98207
moyenne
kernel: mmc: spi: reset bytes_xfered before retrying CRC failuresbuild de 07:11 UTC
CVE-2026-98206
moyenne
kernel: Input: cyttsp5 - clamp the HID report size before memcpybuild de 07:11 UTC
CVE-2026-98205
moyenne
kernel: Input: evdev - zero absinfo before partial copy in EVIOCSABSbuild de 07:11 UTC
CVE-2026-98204
moyenne
kernel: Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()build de 07:11 UTC
CVE-2026-98201
moyenne
kernel: Input: zero ff_effect before compat copy in input_ff_effect_from_userbuild de 07:11 UTC
CVE-2026-98200
moyenne
kernel: hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()build de 07:11 UTC
CVE-2026-98199
moyenne
kernel: hwmon: (pmbus/core) increase number of phases and add new maskbuild de 07:11 UTC
CVE-2026-98198
moyenne
kernel: hwmon: (pwm-fan) Stop RPM timer before freeing tach databuild de 07:11 UTC
CVE-2026-98197
moyenne
kernel: hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on removebuild de 07:11 UTC
CVE-2026-98196
moyenne
kernel: wifi: brcmsmac: fix UAF in brcms_free_timer()build de 07:11 UTC
CVE-2026-98195
moyenne
kernel: wifi: iwlegacy: fix broadcast stations deallocationbuild de 07:11 UTC
CVE-2026-98194
moyenne
kernel: wifi: libertas_tf: fix UAF in lbtf_free_adapter()build de 07:11 UTC
CVE-2026-98193
moyenne
kernel: wifi: libipw: reject TKIP frames without a full MICbuild de 07:11 UTC
CVE-2026-98192
moyenne
kernel: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardownbuild de 07:11 UTC
CVE-2026-98190
moyenne
kernel: wifi: wilc1000: fix out-of-bounds read in P2P public action framesbuild de 07:11 UTC
CVE-2026-98189
moyenne
kernel: wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()build de 07:11 UTC
CVE-2026-98188
moyenne
kernel: wifi: p54: validate curve data length in the calibration curve convertersbuild de 07:11 UTC
CVE-2026-98187
moyenne
kernel: wifi: p54: require a full exp_if record in PDR_INTERFACE_LISTbuild de 07:11 UTC
CVE-2026-98186
moyenne
kernel: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE lengthbuild de 07:11 UTC
CVE-2026-98185
moyenne
kernel: wifi: mwifiex: validate scan response extentsbuild de 07:11 UTC
CVE-2026-98184
moyenne
kernel: wifi: mwifiex: prevent authentication frame length truncationbuild de 07:11 UTC
CVE-2026-98183
moyenne
kernel: wifi: mac80211: avoid out-of-bounds read for empty PREQ elementsbuild de 07:11 UTC
CVE-2026-98181
moyenne
kernel: drm/gud: fix out-of-bounds write in gud_plane_atomic_check()build de 07:11 UTC
CVE-2026-98180
moyenne
kernel: drm/msm: RCU-free the scheduler-containing ring and VM objectsbuild de 07:11 UTC
CVE-2026-98175
moyenne
kernel: smb: client: cancel reconnect work in clean_demultiplex_info()build de 07:11 UTC
CVE-2026-98174
moyenne
kernel: smb: client: fix rlist race and missing initializationbuild de 07:11 UTC
CVE-2026-98173
moyenne
kernel: smb: client: fix use-after-free of iface in cifs_try_adding_channels()build de 07:11 UTC
CVE-2026-98172
moyenne
kernel: smb: client: fix smbd_connection leak on cifs_get_tcp_session() errorbuild de 07:11 UTC
CVE-2026-98170
moyenne
kernel: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()build de 07:11 UTC
CVE-2026-98168
moyenne
kernel: smb: client: fix reparse buffer bounds in cifs_query_reparse_point()build de 07:11 UTC
CVE-2026-98167
moyenne
kernel: smb: client: fix server->total_read for compound encrypted PDUsbuild de 07:11 UTC
CVE-2026-98166
moyenne
kernel: drm/ttm: fix swapped-out resources never leaving their bulk_move rangebuild de 07:11 UTC
CVE-2026-105305
moyenne
keycloak-services: keycloak-services: Device Authorization Grant bypasses per-client minimum.acr.value enforcementbuild de 07:11 UTC
CVE-2026-105775
moyenne
vllm: vLLM: Denial of Service via out-of-bounds read in completions request handlerbuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.