Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98595
faible
kernel: udp: remove a disconnected socket from the 4-tuple hash tablebuild de 07:11 UTC
CVE-2026-98594
faible
kernel: tg3: clean up PHYLIB resources on probe failurebuild de 07:11 UTC
CVE-2026-98579
faible
kernel: nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failurebuild de 07:11 UTC
CVE-2026-98553
faible
kernel: autofs: fix sbi->pipe file reference leak in autofs_kill_sb()build de 07:11 UTC
CVE-2026-98552
faible
kernel: perf/core: Fix a refcount leak in attach_perf_ctx_data()build de 07:11 UTC
CVE-2026-98551
faible
kernel: perf/core: Fill branch entries with a single assignmentbuild de 07:11 UTC
CVE-2026-98542
faible
kernel: cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflictbuild de 07:11 UTC
CVE-2026-98535
faible
kernel: fsl/fman: Fix clk reference leak in read_dts_node()build de 07:11 UTC
CVE-2026-98531
faible
kernel: ipv6: sr: enforce exact attribute length for SEG6_ATTR_DSTbuild de 07:11 UTC
CVE-2026-98529
faible
kernel: gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()build de 07:11 UTC
CVE-2026-98528
faible
kernel: gpio: cdev: fix kernel stack leak to user-space in error pathbuild de 07:11 UTC
CVE-2026-98527
faible
kernel: gpio: zynq: fix runtime PM leak on request error pathbuild de 07:11 UTC
CVE-2026-98519
faible
kernel: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()build de 07:11 UTC
CVE-2026-98516
faible
kernel: drm/nouveau: Fix bridge reference leak in nv1a_ram_new()build de 07:11 UTC
CVE-2026-98514
faible
kernel: drm/nouveau: Fix gem reference leak in validate_init()build de 07:11 UTC
CVE-2026-98513
faible
kernel: drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()build de 07:11 UTC
CVE-2026-98509
faible
kernel: drm/virtio: fix memory leak of fence event on execbuffer failurebuild de 07:11 UTC
CVE-2026-98505
faible
kernel: mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()build de 07:11 UTC
CVE-2026-98502
faible
kernel: HID: alps: unregister DualPoint Stick input device on removebuild de 07:11 UTC
CVE-2026-98498
faible
kernel: net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()build de 07:11 UTC
CVE-2026-98492
faible
kernel: net: macb: fix dma_alloc_coherent() leak on macb_alloc() error pathsbuild de 07:11 UTC
CVE-2026-98486
faible
kernel: net: ena: fix MMIO read buffer leak on probe failurebuild de 07:11 UTC
CVE-2026-98484
faible
kernel: netfilter: nf_tables: skip expired catchall elements on insert and deletebuild de 07:11 UTC
CVE-2026-98480
faible
kernel: nfc: trf7970a: power down on startup RX gain failurebuild de 07:11 UTC
CVE-2026-98473
faible
kernel: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host configbuild de 07:11 UTC
CVE-2026-98472
faible
kernel: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEVbuild de 07:11 UTC
CVE-2026-98468
faible
kernel: KVM: arm64: Fix spurious warning for benign stage 2 teardown racebuild de 07:11 UTC
CVE-2026-98450
faible
kernel: smb: client: close completed creates on compound wait errorsbuild de 07:11 UTC
CVE-2026-98448
faible
kernel: xfs: release orphanage dir inode if chown failsbuild de 07:11 UTC
CVE-2026-98437
faible
kernel: media: qcom: iris: fix runtime PM reference leaksbuild de 07:11 UTC
CVE-2026-98433
faible
kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failurebuild de 07:11 UTC
CVE-2026-17591
faible
libarchive: libarchive: use-after-free via aliased Mac metadata copybuild de 07:11 UTC
CVE-2026-62438
faible
gimp: gimp: PAA integer overflow out-of-bounds readbuild de 07:11 UTC
CVE-2026-84823
faible
org.wildfly.core: WildFly: Path traversal in take-snapshot discloses the server configuration to the Monitor rolebuild de 07:11 UTC
CVE-2026-55467
faible
cups: cups: Denial of Service via unsanitized fax job attributesbuild de 07:11 UTC
CVE-2026-77564
faible
Talos Linux: Support bundle does not redact registry credentialsbuild de 07:11 UTC
CVE-2026-98431
faible
kernel: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependencybuild de 07:11 UTC
CVE-2026-98425
faible
kernel: wifi: mac80211: don't warn when an IBSS has no channel to scanbuild de 07:11 UTC
CVE-2026-98424
faible
kernel: wifi: cfg80211: undo netns switch if renaming the wiphy failsbuild de 07:11 UTC
CVE-2026-98422
faible
kernel: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdownbuild de 07:11 UTC
CVE-2026-98421
faible
kernel: wifi: mac80211: require a peer station for TDLS setup confirmbuild de 07:11 UTC
CVE-2026-98406
faible
kernel: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driverbuild de 07:11 UTC
CVE-2026-98404
faible
kernel: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()build de 07:11 UTC
CVE-2026-98400
faible
kernel: s390/ipl: Fix NULL deref in kdump without re-IPL parm blockbuild de 07:11 UTC
CVE-2026-98399
faible
kernel: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm blockbuild de 07:11 UTC
CVE-2026-98388
faible
kernel: exec: do_close_on_exec() before taking exec_update_lockbuild de 07:11 UTC
CVE-2026-98387
faible
kernel: s390/crypto: Fix skcipher_walk return code handling in aes_s390build de 07:11 UTC
CVE-2026-98386
faible
kernel: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slotbuild de 07:11 UTC
CVE-2026-88842
faible
busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruptionbuild de 07:11 UTC
CVE-2026-77205
faible
libreswan: Denial of Service via sending bogus X.509 certificatesbuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.