Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98595
düşük
kernel: udp: remove a disconnected socket from the 4-tuple hash table07:11 UTC derlemesi
CVE-2026-98594
düşük
kernel: tg3: clean up PHYLIB resources on probe failure07:11 UTC derlemesi
CVE-2026-98579
düşük
kernel: nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure07:11 UTC derlemesi
CVE-2026-98553
düşük
kernel: autofs: fix sbi->pipe file reference leak in autofs_kill_sb()07:11 UTC derlemesi
CVE-2026-98552
düşük
kernel: perf/core: Fix a refcount leak in attach_perf_ctx_data()07:11 UTC derlemesi
CVE-2026-98551
düşük
kernel: perf/core: Fill branch entries with a single assignment07:11 UTC derlemesi
CVE-2026-98542
düşük
kernel: cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict07:11 UTC derlemesi
CVE-2026-98535
düşük
kernel: fsl/fman: Fix clk reference leak in read_dts_node()07:11 UTC derlemesi
CVE-2026-98531
düşük
kernel: ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST07:11 UTC derlemesi
CVE-2026-98529
düşük
kernel: gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()07:11 UTC derlemesi
CVE-2026-98528
düşük
kernel: gpio: cdev: fix kernel stack leak to user-space in error path07:11 UTC derlemesi
CVE-2026-98527
düşük
kernel: gpio: zynq: fix runtime PM leak on request error path07:11 UTC derlemesi
CVE-2026-98519
düşük
kernel: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()07:11 UTC derlemesi
CVE-2026-98516
düşük
kernel: drm/nouveau: Fix bridge reference leak in nv1a_ram_new()07:11 UTC derlemesi
CVE-2026-98514
düşük
kernel: drm/nouveau: Fix gem reference leak in validate_init()07:11 UTC derlemesi
CVE-2026-98513
düşük
kernel: drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()07:11 UTC derlemesi
CVE-2026-98509
düşük
kernel: drm/virtio: fix memory leak of fence event on execbuffer failure07:11 UTC derlemesi
CVE-2026-98505
düşük
kernel: mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()07:11 UTC derlemesi
CVE-2026-98502
düşük
kernel: HID: alps: unregister DualPoint Stick input device on remove07:11 UTC derlemesi
CVE-2026-98498
düşük
kernel: net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()07:11 UTC derlemesi
CVE-2026-98492
düşük
kernel: net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths07:11 UTC derlemesi
CVE-2026-98486
düşük
kernel: net: ena: fix MMIO read buffer leak on probe failure07:11 UTC derlemesi
CVE-2026-98484
düşük
kernel: netfilter: nf_tables: skip expired catchall elements on insert and delete07:11 UTC derlemesi
CVE-2026-98480
düşük
kernel: nfc: trf7970a: power down on startup RX gain failure07:11 UTC derlemesi
CVE-2026-98473
düşük
kernel: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config07:11 UTC derlemesi
CVE-2026-98472
düşük
kernel: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV07:11 UTC derlemesi
CVE-2026-98468
düşük
kernel: KVM: arm64: Fix spurious warning for benign stage 2 teardown race07:11 UTC derlemesi
CVE-2026-98450
düşük
kernel: smb: client: close completed creates on compound wait errors07:11 UTC derlemesi
CVE-2026-98448
düşük
kernel: xfs: release orphanage dir inode if chown fails07:11 UTC derlemesi
CVE-2026-98437
düşük
kernel: media: qcom: iris: fix runtime PM reference leaks07:11 UTC derlemesi
CVE-2026-98433
düşük
kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure07:11 UTC derlemesi
CVE-2026-17591
düşük
libarchive: libarchive: use-after-free via aliased Mac metadata copy07:11 UTC derlemesi
CVE-2026-62438
düşük
gimp: gimp: PAA integer overflow out-of-bounds read07:11 UTC derlemesi
CVE-2026-84823
düşük
org.wildfly.core: WildFly: Path traversal in take-snapshot discloses the server configuration to the Monitor role07:11 UTC derlemesi
CVE-2026-55467
düşük
cups: cups: Denial of Service via unsanitized fax job attributes07:11 UTC derlemesi
CVE-2026-77564
düşük
Talos Linux: Support bundle does not redact registry credentials07:11 UTC derlemesi
CVE-2026-98431
düşük
kernel: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency07:11 UTC derlemesi
CVE-2026-98425
düşük
kernel: wifi: mac80211: don't warn when an IBSS has no channel to scan07:11 UTC derlemesi
CVE-2026-98424
düşük
kernel: wifi: cfg80211: undo netns switch if renaming the wiphy fails07:11 UTC derlemesi
CVE-2026-98422
düşük
kernel: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown07:11 UTC derlemesi
CVE-2026-98421
düşük
kernel: wifi: mac80211: require a peer station for TDLS setup confirm07:11 UTC derlemesi
CVE-2026-98406
düşük
kernel: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver07:11 UTC derlemesi
CVE-2026-98404
düşük
kernel: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()07:11 UTC derlemesi
CVE-2026-98400
düşük
kernel: s390/ipl: Fix NULL deref in kdump without re-IPL parm block07:11 UTC derlemesi
CVE-2026-98399
düşük
kernel: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block07:11 UTC derlemesi
CVE-2026-98388
düşük
kernel: exec: do_close_on_exec() before taking exec_update_lock07:11 UTC derlemesi
CVE-2026-98387
düşük
kernel: s390/crypto: Fix skcipher_walk return code handling in aes_s39007:11 UTC derlemesi
CVE-2026-98386
düşük
kernel: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot07:11 UTC derlemesi
CVE-2026-88842
düşük
busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption07:11 UTC derlemesi
CVE-2026-77205
düşük
libreswan: Denial of Service via sending bogus X.509 certificates07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.