Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98859
orta
kernel: kernel: Denial of service via use-after-free in HID multitouch driver07:11 UTC derlemesi
CVE-2026-98852
orta
kernel: net: extend IPv6 exthdr detection of tunneled packets07:11 UTC derlemesi
CVE-2026-98850
orta
kernel: net/packet: prevent TX_RING byte count overflow07:11 UTC derlemesi
CVE-2026-98849
orta
kernel: pfcp: fix socket lifetime on netdevice registration failure07:11 UTC derlemesi
CVE-2026-98847
orta
kernel: rtc: spear: initialize IRQ state before requesting alarm IRQ07:11 UTC derlemesi
CVE-2026-98843
orta
kernel: netfs: zero gaps in read-gaps folio to avoid writing back stale data07:11 UTC derlemesi
CVE-2026-98840
orta
kernel: kernel: Denial of Service via use-after-free in virtual console screen driver07:11 UTC derlemesi
CVE-2026-98838
orta
kernel: vt: skip screen update for DEC alignment test on backgroup consoles07:11 UTC derlemesi
CVE-2026-98830
orta
kernel: kernel: Denial of Service via buffer overflow in WFx Wi-Fi driver07:11 UTC derlemesi
CVE-2026-98828
orta
kernel: wifi: ath9k: reject short WMI command responses07:11 UTC derlemesi
CVE-2026-98822
orta
kernel: wifi: mac80211: prevent AP VLAN tx from other interfaces07:11 UTC derlemesi
CVE-2026-98821
orta
kernel: block: reject polled dio with user integrity metadata07:11 UTC derlemesi
CVE-2026-98816
orta
kernel: bpf: Fix overflow of jump offset in constant blinding07:11 UTC derlemesi
CVE-2026-98812
orta
kernel: net/mctp: publish the mctp_dev only after it is initialised07:11 UTC derlemesi
CVE-2026-98810
orta
kernel: wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()07:11 UTC derlemesi
CVE-2026-98808
orta
kernel: net: systemport: Fix buffer overflow in bcm_sysport_get_stats()07:11 UTC derlemesi
CVE-2026-98806
orta
kernel: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled07:11 UTC derlemesi
CVE-2026-98801
orta
kernel: kernel: Denial of Service via improper socket memory reservation handling07:11 UTC derlemesi
CVE-2026-98789
orta
kernel: bpf: Fix objects stuck in free_by_rcu_ttrace07:11 UTC derlemesi
CVE-2026-98785
orta
kernel: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend07:11 UTC derlemesi
CVE-2026-98778
orta
kernel: binder: fix is_failure flag for superseded transaction cleanup07:11 UTC derlemesi
CVE-2026-98775
orta
kernel: nitro_enclaves: fix use-after-free on SLOT_ALLOC failure07:11 UTC derlemesi
CVE-2026-98773
orta
kernel: USB: cdc-acm: skip URB restart in port_shutdown if disconnected07:11 UTC derlemesi
CVE-2026-98772
orta
kernel: USB: serial: fix port tear down use-after-free07:11 UTC derlemesi
CVE-2026-98768
orta
kernel: kernel: Denial of Service via race condition during ANX7411 driver removal07:11 UTC derlemesi
CVE-2026-98761
orta
kernel: usb: typec: tcpm: recover after failure to start the frs ams07:11 UTC derlemesi
CVE-2026-98760
orta
kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()07:11 UTC derlemesi
CVE-2026-98759
orta
kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()07:11 UTC derlemesi
CVE-2026-98753
orta
kernel: tty: tty_port: restore TTY_IO_ERROR on activation failure07:11 UTC derlemesi
CVE-2026-98750
orta
kernel: kernel: use-after-free via race condition in TTY device registration07:11 UTC derlemesi
CVE-2026-98745
orta
kernel: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems07:11 UTC derlemesi
CVE-2026-98744
orta
kernel: ASoC: codecs: max98363: fix uninitialized stream_config->type07:11 UTC derlemesi
CVE-2026-98743
orta
kernel: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type07:11 UTC derlemesi
CVE-2026-98739
orta
kernel: Bluetooth: RFCOMM: Fix initial port reference race07:11 UTC derlemesi
CVE-2026-98736
orta
kernel: Bluetooth: hci_conn: Lock parent access during enhanced SCO setup07:11 UTC derlemesi
CVE-2026-98733
orta
kernel: kernel: Denial of Service via use-after-free in Bluetooth ISO packet queueing07:11 UTC derlemesi
CVE-2026-98731
orta
kernel: Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()07:11 UTC derlemesi
CVE-2026-98729
orta
kernel: x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h07:11 UTC derlemesi
CVE-2026-98727
orta
kernel: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known07:11 UTC derlemesi
CVE-2026-98726
orta
kernel: nvme-multipath: fix underflow in ANA log bounds checks07:11 UTC derlemesi
CVE-2026-98724
orta
kernel: nvmet: pci-epf: reject too-short SGL segments07:11 UTC derlemesi
CVE-2026-98723
orta
kernel: nvmet: copy the hostid into the ctrl before creating PR pc_refs07:11 UTC derlemesi
CVE-2026-98719
orta
kernel: KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it07:11 UTC derlemesi
CVE-2026-98717
orta
kernel: KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy07:11 UTC derlemesi
CVE-2026-98709
orta
kernel: kernel: mac80211: Denial of Service via use-after-free during channel switching07:11 UTC derlemesi
CVE-2026-98705
orta
kernel: wifi: mac80211: account proxy paths against the mesh path limit07:11 UTC derlemesi
CVE-2026-98698
orta
kernel: wifi: mac80211: handle empty FILS association request payload07:11 UTC derlemesi
CVE-2026-98696
orta
kernel: USB: serial: fix driver deregistration order07:11 UTC derlemesi
CVE-2026-98695
orta
kernel: USB: serial: fix ioctl hangup race07:11 UTC derlemesi
CVE-2026-98694
orta
kernel: thunderbolt: Fix KASAN reported use-after-free when request is canceled07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.