Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98862
moyenne
kernel: audit: fix exe mark UAF in kill_rules()build de 01:25 UTC
CVE-2026-98861
moyenne
kernel: kernel: Denial of Service via fprobe use-after-freebuild de 01:25 UTC
CVE-2026-98858
moyenne
kernel: io_uring: fix task_work add use-after-free with SQPOLLbuild de 01:25 UTC
CVE-2026-98856
moyenne
kernel: kprobes: Skip disarmed probes when checking optkprobe overlapbuild de 01:25 UTC
CVE-2026-98855
moyenne
kernel: of/overlay: put property on deadprops only after changeset add succeedsbuild de 01:25 UTC
CVE-2026-98854
moyenne
kernel: of/overlay: only treat a positive changeset id as registeredbuild de 01:25 UTC
CVE-2026-98848
moyenne
kernel: rtc: ac100: Assign .num before accessing .hwsbuild de 01:25 UTC
CVE-2026-98846
moyenne
kernel: sctp: check RCV_SHUTDOWN after the sendmsg connect waitbuild de 01:25 UTC
CVE-2026-98845
moyenne
kernel: tpm: Disable TPM on null key name mismatchbuild de 01:25 UTC
CVE-2026-98842
moyenne
kernel: module: fix lost error code from codetag_load_module()build de 01:25 UTC
CVE-2026-98841
moyenne
kernel: virt: vmgenid: set driver_data before registering notification handlersbuild de 01:25 UTC
CVE-2026-98839
moyenne
kernel: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()build de 01:25 UTC
CVE-2026-98837
moyenne
kernel: ALSA: caiaq: unregister the input device when probe failsbuild de 01:25 UTC
CVE-2026-98836
moyenne
kernel: ALSA: line6: reject oversized playback packetsbuild de 01:25 UTC
CVE-2026-98835
moyenne
kernel: iio: accel: kionix-kx022a: Fix array boundary checkbuild de 01:25 UTC
CVE-2026-98834
moyenne
kernel: mtd: core: avoid double-free of OTP NVMEM devicebuild de 01:25 UTC
CVE-2026-98833
moyenne
kernel: mtd: core: call _get_device() with the master MTDbuild de 01:25 UTC
CVE-2026-98832
moyenne
kernel: blk-cgroup: save IRQ state in blkg_tryget_closest()build de 01:25 UTC
CVE-2026-98829
moyenne
kernel: wifi: mac80211: drop oversized fragments to avoid extra_len overflowbuild de 01:25 UTC
CVE-2026-98827
moyenne
kernel: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZEbuild de 01:25 UTC
CVE-2026-98826
moyenne
kernel: kernel: Denial of service via use-after-free in the AC100 RTC driverbuild de 01:25 UTC
CVE-2026-98825
moyenne
kernel: rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()build de 01:25 UTC
CVE-2026-98824
moyenne
kernel: wifi: mac80211: validate TX status rate metadatabuild de 01:25 UTC
CVE-2026-98823
moyenne
kernel: wifi: cfg80211: preserve hidden-group beacon IE ownershipbuild de 01:25 UTC
CVE-2026-98820
moyenne
kernel: blk-mq: set RQF_USE_SCHED when the operation is knownbuild de 01:25 UTC
CVE-2026-98819
moyenne
kernel: Bluetooth: btintel: validate DDC record lengthsbuild de 01:25 UTC
CVE-2026-98818
moyenne
kernel: mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()build de 01:25 UTC
CVE-2026-98815
moyenne
kernel: nvme: fix cdev lifetimebuild de 01:25 UTC
CVE-2026-98814
moyenne
kernel: nvme: fix command effects log lifetime for multipath headsbuild de 01:25 UTC
CVE-2026-98813
moyenne
kernel: bpf: Hold map BTF for the memory allocator destructor recordbuild de 01:25 UTC
CVE-2026-98809
moyenne
kernel: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregisterbuild de 01:25 UTC
CVE-2026-98807
moyenne
kernel: net/mlx5: Fix slab-out-of-bounds when handling team device eventsbuild de 01:25 UTC
CVE-2026-98804
moyenne
kernel: net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()build de 01:25 UTC
CVE-2026-98803
moyenne
kernel: net: stmmac: fix rx Scatter-Gather supportbuild de 01:25 UTC
CVE-2026-98800
moyenne
kernel: kernel: Denial of Service via use-after-free in BPF trampolinebuild de 01:25 UTC
CVE-2026-98799
moyenne
kernel: bpf: Skip detached progs in trampoline images that are still in usebuild de 01:25 UTC
CVE-2026-98798
moyenne
kernel: net: bcmgenet: fix NULL dereference in set_coalesce before first openbuild de 01:25 UTC
CVE-2026-98797
moyenne
kernel: net: cap skb->queue_mapping when the tx queue is pickedbuild de 01:25 UTC
CVE-2026-98796
moyenne
kernel: net: ethernet: mtk_eth_soc: allocate dummy netdev soonerbuild de 01:25 UTC
CVE-2026-98795
moyenne
kernel: net: sparx5: skip ptp deinit if init was skippedbuild de 01:25 UTC
CVE-2026-98794
moyenne
kernel: ipvs: filter some flags received in the backup serverbuild de 01:25 UTC
CVE-2026-98793
moyenne
kernel: netfilter: bpf: reject invalid NAT manipulation typesbuild de 01:25 UTC
CVE-2026-98792
moyenne
kernel: netfilter: flowtable: generalize pending status bitbuild de 01:25 UTC
CVE-2026-98791
moyenne
kernel: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereferencebuild de 01:25 UTC
CVE-2026-98790
moyenne
kernel: perf: Fix race between perf_event_exit_task() and perf_pending_task()build de 01:25 UTC
CVE-2026-98788
moyenne
kernel: kernel: Privilege escalation via use-after-free during futex hash resizingbuild de 01:25 UTC
CVE-2026-98787
moyenne
kernel: bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()build de 01:25 UTC
CVE-2026-98786
moyenne
kernel: drm/amd/display: guard dc_sink dereferences in MST mode validationbuild de 01:25 UTC
CVE-2026-98783
moyenne
kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform devicebuild de 01:25 UTC
CVE-2026-98776
moyenne
kernel: kernel: Privilege escalation via binderfs use-after-freebuild de 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.