Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98693
orta
kernel: thunderbolt: Hold a router reference for each allocated HopID07:11 UTC derlemesi
CVE-2026-98689
orta
kernel: thunderbolt: Don't access a DP tunnel after its DPRX read was canceled07:11 UTC derlemesi
CVE-2026-98688
orta
kernel: thunderbolt: Fix NULL dereference in tb_remove_work()07:11 UTC derlemesi
CVE-2026-98681
orta
kernel: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races07:11 UTC derlemesi
CVE-2026-98672
orta
kernel: iio: adc: stm32-adc: fix possible division by zero in processed channel07:11 UTC derlemesi
CVE-2026-98662
orta
kernel: kernel: Denial of Service via use-after-free during gp2ap020a00f device removal07:11 UTC derlemesi
CVE-2026-98653
orta
kernel: KVM: s390: Fix _gaccess_shadow_fault()07:11 UTC derlemesi
CVE-2026-98651
orta
kernel: KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()07:11 UTC derlemesi
CVE-2026-98650
orta
kernel: KVM: s390: Fix potential races in dat skey functions07:11 UTC derlemesi
CVE-2026-98649
orta
kernel: KVM: s390: Fix race in _destroy_pages_crste()07:11 UTC derlemesi
CVE-2026-98648
orta
kernel: s390/uv: Prevent potential out-of-bounds read07:11 UTC derlemesi
CVE-2026-98646
orta
kernel: tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context07:11 UTC derlemesi
CVE-2026-98644
orta
kernel: bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()07:11 UTC derlemesi
CVE-2026-98640
orta
kernel: HID: amd_sfh: Validate PCI BAR size before mapping07:11 UTC derlemesi
CVE-2026-98637
orta
kernel: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure07:11 UTC derlemesi
CVE-2026-98635
orta
kernel: scsi: block: Fix zones_cond out-of-bounds write on zone report07:11 UTC derlemesi
CVE-2026-98634
orta
kernel: scsi: sd_zbc: Reject disks with too many zones07:11 UTC derlemesi
CVE-2026-98631
orta
kernel: xsk: Use a 32-bit compare in xsk_map_gen_lookup07:11 UTC derlemesi
CVE-2026-98630
orta
kernel: eth: fbnic: Fix payload page pool error cleanup07:11 UTC derlemesi
CVE-2026-98622
orta
kernel: net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure07:11 UTC derlemesi
CVE-2026-98613
orta
kernel: bpf: Bound ownership depth through local kptrs and graph roots07:11 UTC derlemesi
CVE-2026-98612
orta
kernel: net: usb: catc: bound the RX packet length in catc_rx_done()07:11 UTC derlemesi
CVE-2026-98611
orta
kernel: bpf: Check params size before reading reserved fields07:11 UTC derlemesi
CVE-2026-98610
orta
kernel: net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget07:11 UTC derlemesi
CVE-2026-98606
orta
kernel: drm/virtio: release the GEM object on virtio_gpu_vram_create() errors07:11 UTC derlemesi
CVE-2026-98605
orta
kernel: drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach07:11 UTC derlemesi
CVE-2026-98601
orta
kernel: Bluetooth: btintel_pcie: validate device-supplied DMA indices07:11 UTC derlemesi
CVE-2026-98598
orta
kernel: ipv6: Prevent rt6_insert_exception() for dying fib6_info07:11 UTC derlemesi
CVE-2026-98597
orta
kernel: net: usb: sr9700: include receive overhead in the length check07:11 UTC derlemesi
CVE-2026-98596
orta
kernel: ipv6: Fix dst leak for uncached routes07:11 UTC derlemesi
CVE-2026-98592
orta
kernel: net: spacemit: clear TX descriptor on fragment mapping failure07:11 UTC derlemesi
CVE-2026-98591
orta
kernel: bpf: Fix bounds check for skb-backed dynptrs07:11 UTC derlemesi
CVE-2026-98588
orta
kernel: bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc07:11 UTC derlemesi
CVE-2026-98585
orta
kernel: eth: fbnic: Avoid rounding zero ring sizes07:11 UTC derlemesi
CVE-2026-98582
orta
kernel: nfc: st21nfca: validate received frame size07:11 UTC derlemesi
CVE-2026-98581
orta
kernel: nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()07:11 UTC derlemesi
CVE-2026-98580
orta
kernel: nfc: llcp: Fix race condition in accept_queue lifecycle07:11 UTC derlemesi
CVE-2026-98577
orta
kernel: nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()07:11 UTC derlemesi
CVE-2026-98575
orta
kernel: nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()07:11 UTC derlemesi
CVE-2026-98569
orta
kernel: ip_gre: Reject enabling collect metadata through changelink07:11 UTC derlemesi
CVE-2026-98567
orta
kernel: net: xps: reject an out of range traffic class07:11 UTC derlemesi
CVE-2026-98561
orta
kernel: nfp: hold IPsec RX state under the XArray lock07:11 UTC derlemesi
CVE-2026-98558
orta
kernel: net: flush skb_defer_nodes in dev_cpu_dead()07:11 UTC derlemesi
CVE-2026-98556
orta
kernel: gve: DQO: reject TSO packets with an out of range MSS07:11 UTC derlemesi
CVE-2026-98555
orta
kernel: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure07:11 UTC derlemesi
CVE-2026-98554
orta
kernel: vlan: ensure sufficient headroom in vlan_dev_hard_header()07:11 UTC derlemesi
CVE-2026-98549
orta
kernel: tcp: prevent collapsing skbs across boundary in rtx queue07:11 UTC derlemesi
CVE-2026-98547
orta
kernel: af_packet: fix integer overflow in prb_calc_retire_blk_tmo()07:11 UTC derlemesi
CVE-2026-98546
orta
kernel: arm64/boot: Disable trapping of PMZR_EL0 writes to EL207:11 UTC derlemesi
CVE-2026-98545
orta
kernel: ata: libata-scsi: bound the ATA passthru sense descriptor writes07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.