Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme28 Eki 2026, 01:21 UTC
27kritik, son 7 gün324yüksek, son 7 gün661orta, son 7 gün104düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98543
orta		kernel: bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir07:11 UTC derlemesi
CVE-2026-98541
orta		kernel: fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT07:11 UTC derlemesi
CVE-2026-98538
orta		kernel: writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes07:11 UTC derlemesi
CVE-2026-98537
orta		kernel: workqueue: Fix NULL current_pwq deref in flush dependency check07:11 UTC derlemesi
CVE-2026-98536
orta		kernel: writeback: report a Tasks-RCU quiescent state per cgwb drain pass07:11 UTC derlemesi
CVE-2026-98526
orta		kernel: llc: reserve device headroom for allocated frames07:11 UTC derlemesi
CVE-2026-98525
orta		kernel: mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()07:11 UTC derlemesi
CVE-2026-98522
orta		kernel: drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()07:11 UTC derlemesi
CVE-2026-98521
orta		kernel: drm/i915: fix incorrect RCU teardown order07:11 UTC derlemesi
CVE-2026-98518
orta		kernel: drm/nouveau/dmem: pin VRAM for the whole registered range07:11 UTC derlemesi
CVE-2026-98517
orta		kernel: drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM07:11 UTC derlemesi
CVE-2026-98515
orta		kernel: drm/nouveau: fix double-free in nvif_vmm_dtor07:11 UTC derlemesi
CVE-2026-98512
orta		kernel: drm/nouveau: RCU-free the scheduler-containing nouveau_sched07:11 UTC derlemesi
CVE-2026-98511
orta		kernel: drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()07:11 UTC derlemesi
CVE-2026-98510
orta		kernel: drm/xe/vm: nuke PTs only after unlinking contested VMAs07:11 UTC derlemesi
CVE-2026-98508
orta		kernel: drm/virtio: fix NULL pointer dereference on fence allocation failure07:11 UTC derlemesi
CVE-2026-98507
orta		kernel: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish07:11 UTC derlemesi
CVE-2026-98506
orta		kernel: mm/hugetlb: do not dissolve gigantic pages without runtime support07:11 UTC derlemesi
CVE-2026-98501
orta		kernel: HID: alps: fix use-after-free on input2 registration failure07:11 UTC derlemesi
CVE-2026-98499
orta		kernel: HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()07:11 UTC derlemesi
CVE-2026-98497
orta		kernel: net/mlx5e: fix swapped IPv6 IPsec policy masks07:11 UTC derlemesi
CVE-2026-98495
orta		kernel: net: arp: terminate device name before lookup07:11 UTC derlemesi
CVE-2026-98494
orta		kernel: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read07:11 UTC derlemesi
CVE-2026-98489
orta		kernel: net: atl1c: fix soft lockup on out-of-range tpd_cons read07:11 UTC derlemesi
CVE-2026-98488
orta		kernel: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read07:11 UTC derlemesi
CVE-2026-98487
orta		kernel: net: bridge: mdb: restart port group walk after deletion07:11 UTC derlemesi
CVE-2026-98485
orta		kernel: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read07:11 UTC derlemesi
CVE-2026-98482
orta		kernel: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()07:11 UTC derlemesi
CVE-2026-98481
orta		kernel: nfc: port100: reject frames whose declared length exceeds the received data07:11 UTC derlemesi
CVE-2026-98479
orta		kernel: scsi: libiscsi_tcp: Check the data direction of a Data-In PDU07:11 UTC derlemesi
CVE-2026-98478
orta		kernel: scsi: ufs: core: Keep internal commands dispatchable during error handling07:11 UTC derlemesi
CVE-2026-98477
orta		kernel: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()07:11 UTC derlemesi
CVE-2026-98476
orta		kernel: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()07:11 UTC derlemesi
CVE-2026-98475
orta		kernel: s390/cmf: Fix virtual vs physical address confusion07:11 UTC derlemesi
CVE-2026-98471
orta		kernel: KVM: SEV: Do cache maintenance on the source VM during intra-host migration07:11 UTC derlemesi
CVE-2026-98470
orta		kernel: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode07:11 UTC derlemesi
CVE-2026-98469
orta		kernel: KVM: arm64: Fix AArch32 DBGBXVR<n> handling07:11 UTC derlemesi
CVE-2026-98467
orta		kernel: KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race07:11 UTC derlemesi
CVE-2026-98465
orta		kernel: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration07:11 UTC derlemesi
CVE-2026-98464
orta		kernel: RISC-V: KVM: Synchronize hrtimer callback during teardown07:11 UTC derlemesi
CVE-2026-98461
orta		kernel: Bluetooth: hci_sock: validate event length before filtering07:11 UTC derlemesi
CVE-2026-98460
orta		kernel: Bluetooth: hci_sock: reject out-of-range OCF values07:11 UTC derlemesi
CVE-2026-98455
orta		kernel: Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO07:11 UTC derlemesi
CVE-2026-98454
orta		kernel: smb: client: fix create context out-of-bounds reads07:11 UTC derlemesi
CVE-2026-98453
orta		kernel: smb: client: close handle after create-context parsing failure07:11 UTC derlemesi
CVE-2026-98452
orta		kernel: smb: client: clean up failed cached directory opens07:11 UTC derlemesi
CVE-2026-98445
orta		kernel: xfs: don't let memory failures leak blocks and kill repairs07:11 UTC derlemesi
CVE-2026-98443
orta		kernel: xfs: fix cursor and pointer handling when recovering iunlink buckets07:11 UTC derlemesi
CVE-2026-98436
orta		In the Linux kernel, the following vulnerability has been resolved: a ...07:11 UTC derlemesi
CVE-2026-98434
orta		kernel: sysctl: Check range in proc_dointvec_ms_jiffies_minmax07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.