Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98770
moyenne
kernel: usb: gadget: midi2: Fix the jack descriptor array sizesbuild de 01:25 UTC
CVE-2026-98767
moyenne
kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer countbuild de 01:25 UTC
CVE-2026-98766
moyenne
kernel: usb: gadget: aspeed-vhub: cancel wake work on device removalbuild de 01:25 UTC
CVE-2026-98765
moyenne
kernel: USB: gadget: dummy-hcd: Fix wait for outstanding request completionsbuild de 01:25 UTC
CVE-2026-98764
moyenne
kernel: usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESCbuild de 01:25 UTC
CVE-2026-98763
moyenne
kernel: usb: core: clear both ep_in and ep_out for non-ep0 control endpointsbuild de 01:25 UTC
CVE-2026-98762
moyenne
kernel: kernel: Denial of Service via use-after-free in USB DWC2 driverbuild de 01:25 UTC
CVE-2026-98758
moyenne
kernel: usb: typec: ucsi: glink: fix use-after-free of ucsi on removebuild de 01:25 UTC
CVE-2026-98757
moyenne
kernel: usb: cdns3: fix use-after-free in cdns3_gadget_exit()build de 01:25 UTC
CVE-2026-98756
moyenne
kernel: usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probebuild de 01:25 UTC
CVE-2026-98754
moyenne
kernel: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanupbuild de 01:25 UTC
CVE-2026-98752
moyenne
kernel: tty: port: fix tty_port_tty_vhangup() racebuild de 01:25 UTC
CVE-2026-98751
moyenne
kernel: tty: abort break signalling on hangupbuild de 01:25 UTC
CVE-2026-98749
moyenne
kernel: kernel: Denial of Service via use-after-free in MAX3100 serial driverbuild de 01:25 UTC
CVE-2026-98748
moyenne
kernel: kernel: Denial of Service via use-after-free in Broadcom serial driverbuild de 01:25 UTC
CVE-2026-98747
moyenne
kernel: serial: core: fix NULL pointer dereference in serial_core_unregister_port()build de 01:25 UTC
CVE-2026-98740
moyenne
kernel: EDAC/altera: Drop __init from ECC setup paths for re-probe safetybuild de 01:25 UTC
CVE-2026-98738
moyenne
kernel: kernel: denial of service via race condition in Bluetooth SMP remote OOB handlingbuild de 01:25 UTC
CVE-2026-98737
moyenne
kernel: kernel: Denial of service via Bluetooth inquiry cache use-after-freebuild de 01:25 UTC
CVE-2026-98735
moyenne
kernel: Bluetooth: hci_core: Serialize ACL scheduling with channel deletionbuild de 01:25 UTC
CVE-2026-98734
moyenne
kernel: kernel: Denial of Service via use-after-free in Bluetooth connection schedulingbuild de 01:25 UTC
CVE-2026-98730
moyenne
kernel: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()build de 01:25 UTC
CVE-2026-98722
moyenne
kernel: mtd: block2mtd: Fix divide error when erase_size is zerobuild de 01:25 UTC
CVE-2026-98721
moyenne
kernel: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQbuild de 01:25 UTC
CVE-2026-98720
moyenne
kernel: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modifiedbuild de 01:25 UTC
CVE-2026-98714
moyenne
kernel: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeededbuild de 01:25 UTC
CVE-2026-98713
moyenne
kernel: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGTbuild de 01:25 UTC
CVE-2026-98712
moyenne
kernel: KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irqbuild de 01:25 UTC
CVE-2026-98711
moyenne
kernel: kernel: cw1200: Information disclosure via out-of-bounds read during frame transmissionbuild de 01:25 UTC
CVE-2026-98708
moyenne
kernel: kernel: mac80211: Denial of Service via use-after-free in channel context replacementbuild de 01:25 UTC
CVE-2026-98707
moyenne
kernel: wifi: mac80211: shut down RX BA session timer on teardownbuild de 01:25 UTC
CVE-2026-98706
moyenne
kernel: wifi: mac80211: drain PS delivery work during station teardownbuild de 01:25 UTC
CVE-2026-98704
moyenne
kernel: wifi: mac80211: keep fallback association elements alivebuild de 01:25 UTC
CVE-2026-98703
moyenne
kernel: wifi: mac80211: minstrel_ht: validate fixed rate indexbuild de 01:25 UTC
CVE-2026-98702
moyenne
kernel: kernel: Denial of Service via invalid channel switch frame in mac80211build de 01:25 UTC
CVE-2026-98701
moyenne
kernel: wifi: mac80211: release mesh path quota on failed additionsbuild de 01:25 UTC
CVE-2026-98699
moyenne
kernel: wifi: mac80211: fix mesh fast xmit path deletion UAFbuild de 01:25 UTC
CVE-2026-98687
moyenne
kernel: thunderbolt: Reject oversized XDomain properties responsesbuild de 01:25 UTC
CVE-2026-98678
moyenne
kernel: iio: adc: ad4030: fix invalid oversampling_ratio validationbuild de 01:25 UTC
CVE-2026-98677
moyenne
kernel: iio: adc: ad_sigma_delta: fix use-after-free on unbindbuild de 01:25 UTC
CVE-2026-98676
moyenne
kernel: iio: adc: ade9000: fix NULL pointer dereference in clkout registrationbuild de 01:25 UTC
CVE-2026-98674
moyenne
kernel: iio: adc: adi-axi-adc: Initialize state mutexbuild de 01:25 UTC
CVE-2026-98673
moyenne
kernel: iio: adc: pac1934: check ACPI label duplicationbuild de 01:25 UTC
CVE-2026-98670
moyenne
kernel: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbindbuild de 01:25 UTC
CVE-2026-98669
moyenne
kernel: iio: buffer: serialize buffer teardown with mode claimsbuild de 01:25 UTC
CVE-2026-98667
moyenne
kernel: iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_databuild de 01:25 UTC
CVE-2026-98666
moyenne
kernel: iio: gyro: adis16136: fix unprotected debugfs readsbuild de 01:25 UTC
CVE-2026-98665
moyenne
kernel: iio: health: max30102: fix NULL dereference in interrupt handlerbuild de 01:25 UTC
CVE-2026-98664
moyenne
kernel: iio: imu: adis16400: fix unprotected debugfs readsbuild de 01:25 UTC
CVE-2026-98663
moyenne
kernel: iio: imu: adis16480: fix unprotected debugfs readsbuild de 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.