Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98291
orta
kernel: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit07:11 UTC derlemesi
CVE-2026-98290
orta
kernel: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup07:11 UTC derlemesi
CVE-2026-98288
orta
kernel: net: stmmac: fix TSO header length truncation07:11 UTC derlemesi
CVE-2026-98287
orta
kernel: pppoatm: ensure a writable skb header and linear data07:11 UTC derlemesi
CVE-2026-98286
orta
kernel: drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown07:11 UTC derlemesi
CVE-2026-98284
orta
kernel: netlink: do not free nlk->groups while lockless readers can use it07:11 UTC derlemesi
CVE-2026-98283
orta
kernel: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()07:11 UTC derlemesi
CVE-2026-98282
orta
kernel: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba07:11 UTC derlemesi
CVE-2026-98281
orta
kernel: futex: Also allocate private hash on vfork()07:11 UTC derlemesi
CVE-2026-98280
orta
kernel: drm/xe/i2c: Disable IRQ on unbind07:11 UTC derlemesi
CVE-2026-98279
orta
kernel: btrfs: handle lack of space when cleaning up verity items07:11 UTC derlemesi
CVE-2026-98277
orta
kernel: eth: fbnic: ring the doorbell if a burst ends in a drop07:11 UTC derlemesi
CVE-2026-98276
orta
kernel: net: lock the socket in sock_gettstamp()07:11 UTC derlemesi
CVE-2026-98275
orta
In the Linux kernel, the following vulnerability has been resolved: n ...07:11 UTC derlemesi
CVE-2026-98274
orta
In the Linux kernel, the following vulnerability has been resolved: n ...07:11 UTC derlemesi
CVE-2026-98273
orta
kernel: x86/kprobes: Fix crash when probing CS CALL instructions07:11 UTC derlemesi
CVE-2026-98272
orta
kernel: net: mvpp2: prevent buffer overflow in page_pool allocation07:11 UTC derlemesi
CVE-2026-98271
orta
kernel: net: skbuff: do not leave stale header offsets after pskb_carve()07:11 UTC derlemesi
CVE-2026-98269
orta
kernel: btrfs: abort transaction on failure to update inode for hole punching and reflinking07:11 UTC derlemesi
CVE-2026-98267
orta
kernel: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size07:11 UTC derlemesi
CVE-2026-98266
orta
kernel: ALSA: core: Fix potential UAF after asynchronous card release07:11 UTC derlemesi
CVE-2026-98265
orta
kernel: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity07:11 UTC derlemesi
CVE-2026-98264
orta
kernel: ALSA: virtio: reset device before deleting virtqueues07:11 UTC derlemesi
CVE-2026-98262
orta
kernel: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY07:11 UTC derlemesi
CVE-2026-98261
orta
kernel: cifs: Fix server use-after-free in cifs_chan_skip_or_disable()07:11 UTC derlemesi
CVE-2026-98258
orta
kernel: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list07:11 UTC derlemesi
CVE-2026-98257
orta
kernel: rds: ib: use rds_conn_drop() on protocol version mismatch07:11 UTC derlemesi
CVE-2026-98255
orta
kernel: tcp: exclude old ACKs from tcp fast path07:11 UTC derlemesi
CVE-2026-98254
orta
kernel: swiotlb: use the adjusted address for the highmem page lookup07:11 UTC derlemesi
CVE-2026-98253
orta
kernel: RDMA/ucma: Serialize join and leave on copy_to_user failure07:11 UTC derlemesi
CVE-2026-98252
orta
kernel: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()07:11 UTC derlemesi
CVE-2026-98251
orta
kernel: openvswitch: avoid reallocating confirmed conntrack labels07:11 UTC derlemesi
CVE-2026-98250
orta
kernel: nfsd: fix handling of NFSEXP_PNFS in the netlink codepath07:11 UTC derlemesi
CVE-2026-98249
orta
kernel: arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc07:11 UTC derlemesi
CVE-2026-98248
orta
kernel: arm64: percpu: Fix LSE operations on {8,16}-bit types07:11 UTC derlemesi
CVE-2026-98247
orta
kernel: Bluetooth: hci_codec: validate vendor codec count length07:11 UTC derlemesi
CVE-2026-98246
orta
kernel: Bluetooth: hci_sync: Serialize local codec list cleanup07:11 UTC derlemesi
CVE-2026-98245
orta
kernel: btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()07:11 UTC derlemesi
CVE-2026-98244
orta
kernel: btrfs: clear free space tree creation state on rebuild failure07:11 UTC derlemesi
CVE-2026-98243
orta
kernel: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v307:11 UTC derlemesi
CVE-2026-98242
orta
kernel: dma-buf: Fix silent overflow for phys vec to sgt07:11 UTC derlemesi
CVE-2026-98241
orta
kernel: ipv6: xfrm: use full sockets in local error paths07:11 UTC derlemesi
CVE-2026-98239
orta
kernel: net: lan743x: fix RX checksum use-after-free07:11 UTC derlemesi
CVE-2026-98238
orta
kernel: net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()07:11 UTC derlemesi
CVE-2026-98236
orta
kernel: net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value07:11 UTC derlemesi
CVE-2026-98232
orta
In the Linux kernel, the following vulnerability has been resolved: s ...07:11 UTC derlemesi
CVE-2026-98231
orta
kernel: xfrm: serialize state GC with device state flush07:11 UTC derlemesi
CVE-2026-98230
orta
kernel: xfrm: use hlist_del_init_rcu for state_cache and state_cache_input07:11 UTC derlemesi
CVE-2026-98229
orta
kernel: xfrm: save input state data before secpath resets07:11 UTC derlemesi
CVE-2026-98228
orta
kernel: mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.