Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98660
moyenne
kernel: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookupbuild de 01:25 UTC
CVE-2026-98658
moyenne
kernel: iio: proximity: aw96103: validate firmware data lengthbuild de 01:25 UTC
CVE-2026-98657
moyenne
kernel: iio: proximity: pulsedlight: fix iio_device left registered on PM setup failurebuild de 01:25 UTC
CVE-2026-98656
moyenne
kernel: iio: trigger: cancel reenable_work before freeing triggerbuild de 01:25 UTC
CVE-2026-98652
moyenne
kernel: KVM: s390: Add missing srcu in kvm_s390_set_irq_state()build de 01:25 UTC
CVE-2026-98647
moyenne
kernel: bpf: Fix divide-by-zero in btf_struct_walk()build de 01:25 UTC
CVE-2026-98645
moyenne
kernel: HID: winwing: fix use-after-free in force feedback teardownbuild de 01:25 UTC
CVE-2026-98642
moyenne
kernel: bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulkbuild de 01:25 UTC
CVE-2026-98641
moyenne
kernel: bpf, arm64: set up the frame pointer for the exception callbackbuild de 01:25 UTC
CVE-2026-98638
moyenne
kernel: KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()build de 01:25 UTC
CVE-2026-98636
moyenne
kernel: squashfs: Add dictionary size range check to prevent shift-out-of-boundsbuild de 01:25 UTC
CVE-2026-98632
moyenne
kernel: Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancelbuild de 01:25 UTC
CVE-2026-98627
moyenne
kernel: bpf: Preserve packet pointer class displacement in regsafe()build de 01:25 UTC
CVE-2026-98626
moyenne
kernel: bpf: Restrict CO-RE poisoning to relocatable instructionsbuild de 01:25 UTC
CVE-2026-98625
moyenne
kernel: netfilter: flowtable: publish HW_DEAD after worker is donebuild de 01:25 UTC
CVE-2026-98624
moyenne
kernel: netfilter: nfnetlink_queue: hold nfnl mutex in event notifierbuild de 01:25 UTC
CVE-2026-98623
moyenne
kernel: drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_updatebuild de 01:25 UTC
CVE-2026-98620
moyenne
kernel: net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failurebuild de 01:25 UTC
CVE-2026-98619
moyenne
kernel: net: ethtool: keep rtnl_lock for the ioctl self testbuild de 01:25 UTC
CVE-2026-98618
moyenne
kernel: eth: fbnic: Handle maximum standalone channelsbuild de 01:25 UTC
CVE-2026-98617
moyenne
kernel: eth: fbnic: use the Rx queue napi pointer to find the napi vectorbuild de 01:25 UTC
CVE-2026-98616
moyenne
kernel: eth: fbnic: reset num_napi when the napi vectors are freedbuild de 01:25 UTC
CVE-2026-98615
moyenne
kernel: eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailboxbuild de 01:25 UTC
CVE-2026-98602
moyenne
kernel: Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthroughbuild de 01:25 UTC
CVE-2026-98600
moyenne
kernel: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()build de 01:25 UTC
CVE-2026-98599
moyenne
kernel: bpf: Reject non-negative offsets in stack_slot_obj_get_spi()build de 01:25 UTC
CVE-2026-98593
moyenne
kernel: s390/debug: Fix NULL pointer dereference in debug_info_copy()build de 01:25 UTC
CVE-2026-98590
moyenne
kernel: bpf: Fix bpf_sock context code generationbuild de 01:25 UTC
CVE-2026-98589
moyenne
kernel: bpf: Reject pkt arguments in mutating subprogsbuild de 01:25 UTC
CVE-2026-98587
moyenne
kernel: firewire: cdev: fix back-transition for iso_resource_auto client resourcebuild de 01:25 UTC
CVE-2026-98586
moyenne
kernel: sctp: hold asoc or transport before mod_timer() in timer handlersbuild de 01:25 UTC
CVE-2026-98583
moyenne
kernel: nfc: nfcmrvl: validate helper command length before pullbuild de 01:25 UTC
CVE-2026-98578
moyenne
kernel: nfc: st21nfca: validate ISO15693 inventory lengthbuild de 01:25 UTC
CVE-2026-98576
moyenne
kernel: nfc: llcp: fix slab-out-of-bounds reads when logging service namesbuild de 01:25 UTC
CVE-2026-98574
moyenne
kernel: net: bcmgenet: stop Tx NAPI before disabling the queuesbuild de 01:25 UTC
CVE-2026-98572
moyenne
kernel: bpf: Fix immediate JMP JEQ/JNE on MIPS32build de 01:25 UTC
CVE-2026-98571
moyenne
kernel: net: stmmac: clear stale buf->page after recycling on skb build failurebuild de 01:25 UTC
CVE-2026-98570
moyenne
kernel: net: ipv6: keep room for the mac header in dst_dev_overhead()build de 01:25 UTC
CVE-2026-98568
moyenne
kernel: vxlan: use one headroom snapshot for neighbour repliesbuild de 01:25 UTC
CVE-2026-98566
moyenne
kernel: drm/imagination: clamp freelist reconstruction requestsbuild de 01:25 UTC
CVE-2026-98565
moyenne
kernel: net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621build de 01:25 UTC
CVE-2026-98564
moyenne
kernel: net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irqbuild de 01:25 UTC
CVE-2026-98563
moyenne
kernel: net: phylink: record the PHY only once bringup cannot failbuild de 01:25 UTC
CVE-2026-98562
moyenne
kernel: net: libwx: fix races in Tx timestamp handlingbuild de 01:25 UTC
CVE-2026-98559
moyenne
kernel: net/smc: fix UAF on lgr list traversal in smcr_port_err()build de 01:25 UTC
CVE-2026-98557
moyenne
kernel: gve: DQO: fix header length used by gve_can_send_tso() for UDP GSObuild de 01:25 UTC
CVE-2026-98544
moyenne
kernel: bna: prevent IOC timer rearm during teardownbuild de 01:25 UTC
CVE-2026-98540
moyenne
kernel: fprobe: Terminate the fgraph_data list when the reservation is not filledbuild de 01:25 UTC
CVE-2026-98539
moyenne
kernel: fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" sagabuild de 01:25 UTC
CVE-2026-98534
moyenne
kernel: ipe: fix use-after-free when auditing a newly loaded policybuild de 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.