Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98862
orta
kernel: audit: fix exe mark UAF in kill_rules()01:25 UTC derlemesi
CVE-2026-98861
orta
kernel: kernel: Denial of Service via fprobe use-after-free01:25 UTC derlemesi
CVE-2026-98858
orta
kernel: io_uring: fix task_work add use-after-free with SQPOLL01:25 UTC derlemesi
CVE-2026-98856
orta
kernel: kprobes: Skip disarmed probes when checking optkprobe overlap01:25 UTC derlemesi
CVE-2026-98855
orta
kernel: of/overlay: put property on deadprops only after changeset add succeeds01:25 UTC derlemesi
CVE-2026-98854
orta
kernel: of/overlay: only treat a positive changeset id as registered01:25 UTC derlemesi
CVE-2026-98848
orta
kernel: rtc: ac100: Assign .num before accessing .hws01:25 UTC derlemesi
CVE-2026-98846
orta
kernel: sctp: check RCV_SHUTDOWN after the sendmsg connect wait01:25 UTC derlemesi
CVE-2026-98845
orta
kernel: tpm: Disable TPM on null key name mismatch01:25 UTC derlemesi
CVE-2026-98842
orta
kernel: module: fix lost error code from codetag_load_module()01:25 UTC derlemesi
CVE-2026-98841
orta
kernel: virt: vmgenid: set driver_data before registering notification handlers01:25 UTC derlemesi
CVE-2026-98839
orta
kernel: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()01:25 UTC derlemesi
CVE-2026-98837
orta
kernel: ALSA: caiaq: unregister the input device when probe fails01:25 UTC derlemesi
CVE-2026-98836
orta
kernel: ALSA: line6: reject oversized playback packets01:25 UTC derlemesi
CVE-2026-98835
orta
kernel: iio: accel: kionix-kx022a: Fix array boundary check01:25 UTC derlemesi
CVE-2026-98834
orta
kernel: mtd: core: avoid double-free of OTP NVMEM device01:25 UTC derlemesi
CVE-2026-98833
orta
kernel: mtd: core: call _get_device() with the master MTD01:25 UTC derlemesi
CVE-2026-98832
orta
kernel: blk-cgroup: save IRQ state in blkg_tryget_closest()01:25 UTC derlemesi
CVE-2026-98829
orta
kernel: wifi: mac80211: drop oversized fragments to avoid extra_len overflow01:25 UTC derlemesi
CVE-2026-98827
orta
kernel: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE01:25 UTC derlemesi
CVE-2026-98826
orta
kernel: kernel: Denial of service via use-after-free in the AC100 RTC driver01:25 UTC derlemesi
CVE-2026-98825
orta
kernel: rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()01:25 UTC derlemesi
CVE-2026-98824
orta
kernel: wifi: mac80211: validate TX status rate metadata01:25 UTC derlemesi
CVE-2026-98823
orta
kernel: wifi: cfg80211: preserve hidden-group beacon IE ownership01:25 UTC derlemesi
CVE-2026-98820
orta
kernel: blk-mq: set RQF_USE_SCHED when the operation is known01:25 UTC derlemesi
CVE-2026-98819
orta
kernel: Bluetooth: btintel: validate DDC record lengths01:25 UTC derlemesi
CVE-2026-98818
orta
kernel: mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()01:25 UTC derlemesi
CVE-2026-98815
orta
kernel: nvme: fix cdev lifetime01:25 UTC derlemesi
CVE-2026-98814
orta
kernel: nvme: fix command effects log lifetime for multipath heads01:25 UTC derlemesi
CVE-2026-98813
orta
kernel: bpf: Hold map BTF for the memory allocator destructor record01:25 UTC derlemesi
CVE-2026-98809
orta
kernel: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister01:25 UTC derlemesi
CVE-2026-98807
orta
kernel: net/mlx5: Fix slab-out-of-bounds when handling team device events01:25 UTC derlemesi
CVE-2026-98804
orta
kernel: net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()01:25 UTC derlemesi
CVE-2026-98803
orta
kernel: net: stmmac: fix rx Scatter-Gather support01:25 UTC derlemesi
CVE-2026-98800
orta
kernel: kernel: Denial of Service via use-after-free in BPF trampoline01:25 UTC derlemesi
CVE-2026-98799
orta
kernel: bpf: Skip detached progs in trampoline images that are still in use01:25 UTC derlemesi
CVE-2026-98798
orta
kernel: net: bcmgenet: fix NULL dereference in set_coalesce before first open01:25 UTC derlemesi
CVE-2026-98797
orta
kernel: net: cap skb->queue_mapping when the tx queue is picked01:25 UTC derlemesi
CVE-2026-98796
orta
kernel: net: ethernet: mtk_eth_soc: allocate dummy netdev sooner01:25 UTC derlemesi
CVE-2026-98795
orta
kernel: net: sparx5: skip ptp deinit if init was skipped01:25 UTC derlemesi
CVE-2026-98794
orta
kernel: ipvs: filter some flags received in the backup server01:25 UTC derlemesi
CVE-2026-98793
orta
kernel: netfilter: bpf: reject invalid NAT manipulation types01:25 UTC derlemesi
CVE-2026-98792
orta
kernel: netfilter: flowtable: generalize pending status bit01:25 UTC derlemesi
CVE-2026-98791
orta
kernel: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference01:25 UTC derlemesi
CVE-2026-98790
orta
kernel: perf: Fix race between perf_event_exit_task() and perf_pending_task()01:25 UTC derlemesi
CVE-2026-98788
orta
kernel: kernel: Privilege escalation via use-after-free during futex hash resizing01:25 UTC derlemesi
CVE-2026-98787
orta
kernel: bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()01:25 UTC derlemesi
CVE-2026-98786
orta
kernel: drm/amd/display: guard dc_sink dereferences in MST mode validation01:25 UTC derlemesi
CVE-2026-98783
orta
kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device01:25 UTC derlemesi
CVE-2026-98776
orta
kernel: kernel: Privilege escalation via binderfs use-after-free01:25 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.