Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98533
moyenne
kernel: ipe: protect the dm-verity root hash with RCUbuild de 01:25 UTC
CVE-2026-98530
moyenne
kernel: kprobes: Fix permanent hang when flushing the kprobe optimizerbuild de 01:25 UTC
CVE-2026-98523
moyenne
kernel: drm/client: fix restore of partially initialized clientbuild de 01:25 UTC
CVE-2026-98520
moyenne
kernel: drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mappingbuild de 01:25 UTC
CVE-2026-98504
moyenne
kernel: PCI: of_property: Omit bus properties without a subordinate busbuild de 01:25 UTC
CVE-2026-98503
moyenne
kernel: packet: use ubuf_info completion for TX_RING packetsbuild de 01:25 UTC
CVE-2026-98500
moyenne
kernel: HID: hid-oxp: use cancel_delayed_work_sync() in removebuild de 01:25 UTC
CVE-2026-98496
moyenne
kernel: net: airoha: npu: cancel wdt_work after releasing the WDT IRQbuild de 01:25 UTC
CVE-2026-98493
moyenne
kernel: net: ipconfig: bound DHCP option constructionbuild de 01:25 UTC
CVE-2026-98491
moyenne
kernel: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entrybuild de 01:25 UTC
CVE-2026-98483
moyenne
kernel: nfc: fix use-after-free in nfc_get_local_general_bytesbuild de 01:25 UTC
CVE-2026-98474
moyenne
kernel: s390/pci: Fix missing device lock in zpci_report_status()build de 01:25 UTC
CVE-2026-98463
moyenne
kernel: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flagsbuild de 01:25 UTC
CVE-2026-98462
moyenne
kernel: Bluetooth: hci_conn: fix CIS hold ownership on reusebuild de 01:25 UTC
CVE-2026-98459
moyenne
kernel: Bluetooth: ISO: balance the parent hold in hci_bind_bis()build de 01:25 UTC
CVE-2026-98457
moyenne
kernel: Bluetooth: L2CAP: validate frame length before control and FCS accessbuild de 01:25 UTC
CVE-2026-98456
moyenne
kernel: Bluetooth: mgmt: fix race in read_unconf_index_list()build de 01:25 UTC
CVE-2026-98449
moyenne
kernel: smb: client: delete compound mids on send failure before unlockbuild de 01:25 UTC
CVE-2026-98447
moyenne
kernel: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree rootsbuild de 01:25 UTC
CVE-2026-98446
moyenne
kernel: xfs: don't let hidden_space go negative in xfs_metafile_resv_initbuild de 01:25 UTC
CVE-2026-98444
moyenne
kernel: xfs: drop dquot flush lock when we can't find a buffer to flushbuild de 01:25 UTC
CVE-2026-98441
moyenne
kernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entrybuild de 01:25 UTC
CVE-2026-98440
moyenne
kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destructionbuild de 01:25 UTC
CVE-2026-98439
moyenne
kernel: smb/server: cancel async requests when closing connectionbuild de 01:25 UTC
CVE-2026-98435
moyenne
kernel: EDAC/altera: Use parent device for devres in altr_portb_setup()build de 01:25 UTC
CVE-2026-112058
moyenne
libdvdnav: libdvdnav: Denial of Service via out-of-bounds read in set_PTTbuild de 01:25 UTC
CVE-2026-112057
moyenne
libdvdnav: libdvdnav: Denial of Service via crafted disc imagebuild de 01:25 UTC
CVE-2026-112008
moyenne
libmng: libmng: Denial of Service via heap-based buffer overflow in mng_read_ordr()build de 01:25 UTC
CVE-2026-89096
moyenne
nfs-utils: nfs-utils: Denial of Service via memory leak in rpc.statdbuild de 01:25 UTC
CVE-2026-110759
moyenne
perl-text-csv_xs: Text::CSV_XS: Data corruption via trailing carriage return in empty fieldsbuild de 01:25 UTC
CVE-2026-110758
moyenne
perl-text-csv_xs: Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace strippingbuild de 01:25 UTC
CVE-2026-110757
moyenne
perl-text-csv_xs: Text::CSV_XS: CSV record splitting via unquoted numeric fieldsbuild de 01:25 UTC
CVE-2026-110756
moyenne
perl-text-csv_xs: Text::CSV_XS: Data corruption via invalid UTF-8 byte sequencesbuild de 01:25 UTC
CVE-2026-110755
moyenne
perl-text-csv_xs: Text::CSV_XS: Denial of Service via crafted carriage return line endingsbuild de 01:25 UTC
CVE-2026-110754
moyenne
perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsingbuild de 01:25 UTC
CVE-2026-110753
moyenne
perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rowsbuild de 01:25 UTC
CVE-2026-85977
moyenne
libtirpc: libtirpc: Denial of Service via unbounded memory allocation during portmapper response decodingbuild de 01:25 UTC
CVE-2026-85231
moyenne
libtirpc: libtirpc: Denial of service via unbounded memory allocation during RPCSEC_GSS decodingbuild de 01:25 UTC
CVE-2026-89098
moyenne
nfs-utils: nfs-utils: Denial of Service via assertion failure in fsiddbuild de 01:25 UTC
CVE-2026-46471
moyenne
gstreamer1-plugins-good: gstreamer1-plugins-good: information disclosure via out-of-bounds read during MP4 parsingbuild de 01:25 UTC
CVE-2026-111555
moyenne
luksmeta: Missing slot-range validation permits out-of-gap device I/Obuild de 01:25 UTC
CVE-2026-111269
moyenne
libical: libical: Denial of Service via out-of-bounds read in icalvalue_decode_ical_string()build de 01:25 UTC
CVE-2026-111157
moyenne
sox: sox: Denial of Service via crafted WAV filebuild de 01:25 UTC
CVE-2026-111141
moyenne
zziplib: zziplib: Denial of Service via out-of-bounds read in central directory parsingbuild de 01:25 UTC
CVE-2026-111137
moyenne
libsmi: libsmi: Denial of service via out-of-bounds write in smiValueAsString()build de 01:25 UTC
CVE-2026-111132
moyenne
libgxps: libgxps: Denial of Service via crafted XPS documentbuild de 01:25 UTC
CVE-2026-110602
moyenne
libmspack: libmspack: Memory corruption via uninitialized pointer free in kwajd_openbuild de 01:25 UTC
CVE-2026-98430
moyenne
kernel: RDMA/efa: Keep admin queues alive while IRQ is registeredbuild de 01:25 UTC
CVE-2026-98405
moyenne
kernel: smb: client: fix missing iov bounds check in parse_posix_sids()build de 01:25 UTC
CVE-2026-100231
moyenne
gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect UTF-16 size calculation for non-BMP charactersbuild de 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.