Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98227
orta
kernel: memstick: ms_block: destroy io_queue workqueue on removal07:11 UTC derlemesi
CVE-2026-98226
orta
kernel: mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count07:11 UTC derlemesi
CVE-2026-98225
orta
kernel: mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem07:11 UTC derlemesi
CVE-2026-98221
orta
kernel: KEYS: trusted: Fix tpm2_load_cmd() boundary check07:11 UTC derlemesi
CVE-2026-98220
orta
kernel: sched_ext: Fix NULL sched deref in kfunc sub-sched error paths07:11 UTC derlemesi
CVE-2026-98219
orta
kernel: sched_ext: Close the pre-enable ops error claim window07:11 UTC derlemesi
CVE-2026-98218
orta
kernel: i2c: atr: fix dangling adapter pointer on add failure07:11 UTC derlemesi
CVE-2026-98217
orta
kernel: IB/mlx4: Fix use-after-free on pkey sysfs registration failure07:11 UTC derlemesi
CVE-2026-98216
orta
kernel: IB/hfi1: Fix the PIO_CRED credit-return mmap07:11 UTC derlemesi
CVE-2026-98215
orta
kernel: selinux: preserve user SID across nested backing files07:11 UTC derlemesi
CVE-2026-98214
orta
kernel: selinux: recheck intermediate backing files on mprotect()07:11 UTC derlemesi
CVE-2026-98213
orta
kernel: mmc: core: Cancel SDIO IRQ work before freeing host07:11 UTC derlemesi
CVE-2026-98212
orta
kernel: mmc: hsq: Fix use-after-free in retry work07:11 UTC derlemesi
CVE-2026-98211
orta
kernel: mmc: mmci: Fix use-after-free in busy-timeout work07:11 UTC derlemesi
CVE-2026-98210
orta
kernel: mmc: mxcmmc: cancel data work and watchdog on remove07:11 UTC derlemesi
CVE-2026-98209
orta
kernel: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources07:11 UTC derlemesi
CVE-2026-98207
orta
kernel: mmc: spi: reset bytes_xfered before retrying CRC failures07:11 UTC derlemesi
CVE-2026-98206
orta
kernel: Input: cyttsp5 - clamp the HID report size before memcpy07:11 UTC derlemesi
CVE-2026-98205
orta
kernel: Input: evdev - zero absinfo before partial copy in EVIOCSABS07:11 UTC derlemesi
CVE-2026-98204
orta
kernel: Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()07:11 UTC derlemesi
CVE-2026-98201
orta
kernel: Input: zero ff_effect before compat copy in input_ff_effect_from_user07:11 UTC derlemesi
CVE-2026-98200
orta
kernel: hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()07:11 UTC derlemesi
CVE-2026-98199
orta
kernel: hwmon: (pmbus/core) increase number of phases and add new mask07:11 UTC derlemesi
CVE-2026-98198
orta
kernel: hwmon: (pwm-fan) Stop RPM timer before freeing tach data07:11 UTC derlemesi
CVE-2026-98197
orta
kernel: hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove07:11 UTC derlemesi
CVE-2026-98196
orta
kernel: wifi: brcmsmac: fix UAF in brcms_free_timer()07:11 UTC derlemesi
CVE-2026-98195
orta
kernel: wifi: iwlegacy: fix broadcast stations deallocation07:11 UTC derlemesi
CVE-2026-98194
orta
kernel: wifi: libertas_tf: fix UAF in lbtf_free_adapter()07:11 UTC derlemesi
CVE-2026-98193
orta
kernel: wifi: libipw: reject TKIP frames without a full MIC07:11 UTC derlemesi
CVE-2026-98192
orta
kernel: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown07:11 UTC derlemesi
CVE-2026-98190
orta
kernel: wifi: wilc1000: fix out-of-bounds read in P2P public action frames07:11 UTC derlemesi
CVE-2026-98189
orta
kernel: wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()07:11 UTC derlemesi
CVE-2026-98188
orta
kernel: wifi: p54: validate curve data length in the calibration curve converters07:11 UTC derlemesi
CVE-2026-98187
orta
kernel: wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST07:11 UTC derlemesi
CVE-2026-98186
orta
kernel: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length07:11 UTC derlemesi
CVE-2026-98185
orta
kernel: wifi: mwifiex: validate scan response extents07:11 UTC derlemesi
CVE-2026-98184
orta
kernel: wifi: mwifiex: prevent authentication frame length truncation07:11 UTC derlemesi
CVE-2026-98183
orta
kernel: wifi: mac80211: avoid out-of-bounds read for empty PREQ elements07:11 UTC derlemesi
CVE-2026-98181
orta
kernel: drm/gud: fix out-of-bounds write in gud_plane_atomic_check()07:11 UTC derlemesi
CVE-2026-98180
orta
kernel: drm/msm: RCU-free the scheduler-containing ring and VM objects07:11 UTC derlemesi
CVE-2026-98175
orta
kernel: smb: client: cancel reconnect work in clean_demultiplex_info()07:11 UTC derlemesi
CVE-2026-98174
orta
kernel: smb: client: fix rlist race and missing initialization07:11 UTC derlemesi
CVE-2026-98173
orta
kernel: smb: client: fix use-after-free of iface in cifs_try_adding_channels()07:11 UTC derlemesi
CVE-2026-98172
orta
kernel: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error07:11 UTC derlemesi
CVE-2026-98170
orta
kernel: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()07:11 UTC derlemesi
CVE-2026-98168
orta
kernel: smb: client: fix reparse buffer bounds in cifs_query_reparse_point()07:11 UTC derlemesi
CVE-2026-98167
orta
kernel: smb: client: fix server->total_read for compound encrypted PDUs07:11 UTC derlemesi
CVE-2026-98166
orta
kernel: drm/ttm: fix swapped-out resources never leaving their bulk_move range07:11 UTC derlemesi
CVE-2026-105305
orta
keycloak-services: keycloak-services: Device Authorization Grant bypasses per-client minimum.acr.value enforcement07:11 UTC derlemesi
CVE-2026-105775
orta
vllm: vLLM: Denial of Service via out-of-bounds read in completions request handler07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.