Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98770
orta
kernel: usb: gadget: midi2: Fix the jack descriptor array sizes01:25 UTC derlemesi
CVE-2026-98767
orta
kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count01:25 UTC derlemesi
CVE-2026-98766
orta
kernel: usb: gadget: aspeed-vhub: cancel wake work on device removal01:25 UTC derlemesi
CVE-2026-98765
orta
kernel: USB: gadget: dummy-hcd: Fix wait for outstanding request completions01:25 UTC derlemesi
CVE-2026-98764
orta
kernel: usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC01:25 UTC derlemesi
CVE-2026-98763
orta
kernel: usb: core: clear both ep_in and ep_out for non-ep0 control endpoints01:25 UTC derlemesi
CVE-2026-98762
orta
kernel: kernel: Denial of Service via use-after-free in USB DWC2 driver01:25 UTC derlemesi
CVE-2026-98758
orta
kernel: usb: typec: ucsi: glink: fix use-after-free of ucsi on remove01:25 UTC derlemesi
CVE-2026-98757
orta
kernel: usb: cdns3: fix use-after-free in cdns3_gadget_exit()01:25 UTC derlemesi
CVE-2026-98756
orta
kernel: usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe01:25 UTC derlemesi
CVE-2026-98754
orta
kernel: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup01:25 UTC derlemesi
CVE-2026-98752
orta
kernel: tty: port: fix tty_port_tty_vhangup() race01:25 UTC derlemesi
CVE-2026-98751
orta
kernel: tty: abort break signalling on hangup01:25 UTC derlemesi
CVE-2026-98749
orta
kernel: kernel: Denial of Service via use-after-free in MAX3100 serial driver01:25 UTC derlemesi
CVE-2026-98748
orta
kernel: kernel: Denial of Service via use-after-free in Broadcom serial driver01:25 UTC derlemesi
CVE-2026-98747
orta
kernel: serial: core: fix NULL pointer dereference in serial_core_unregister_port()01:25 UTC derlemesi
CVE-2026-98740
orta
kernel: EDAC/altera: Drop __init from ECC setup paths for re-probe safety01:25 UTC derlemesi
CVE-2026-98738
orta
kernel: kernel: denial of service via race condition in Bluetooth SMP remote OOB handling01:25 UTC derlemesi
CVE-2026-98737
orta
kernel: kernel: Denial of service via Bluetooth inquiry cache use-after-free01:25 UTC derlemesi
CVE-2026-98735
orta
kernel: Bluetooth: hci_core: Serialize ACL scheduling with channel deletion01:25 UTC derlemesi
CVE-2026-98734
orta
kernel: kernel: Denial of Service via use-after-free in Bluetooth connection scheduling01:25 UTC derlemesi
CVE-2026-98730
orta
kernel: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()01:25 UTC derlemesi
CVE-2026-98722
orta
kernel: mtd: block2mtd: Fix divide error when erase_size is zero01:25 UTC derlemesi
CVE-2026-98721
orta
kernel: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ01:25 UTC derlemesi
CVE-2026-98720
orta
kernel: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified01:25 UTC derlemesi
CVE-2026-98714
orta
kernel: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded01:25 UTC derlemesi
CVE-2026-98713
orta
kernel: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT01:25 UTC derlemesi
CVE-2026-98712
orta
kernel: KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq01:25 UTC derlemesi
CVE-2026-98711
orta
kernel: kernel: cw1200: Information disclosure via out-of-bounds read during frame transmission01:25 UTC derlemesi
CVE-2026-98708
orta
kernel: kernel: mac80211: Denial of Service via use-after-free in channel context replacement01:25 UTC derlemesi
CVE-2026-98707
orta
kernel: wifi: mac80211: shut down RX BA session timer on teardown01:25 UTC derlemesi
CVE-2026-98706
orta
kernel: wifi: mac80211: drain PS delivery work during station teardown01:25 UTC derlemesi
CVE-2026-98704
orta
kernel: wifi: mac80211: keep fallback association elements alive01:25 UTC derlemesi
CVE-2026-98703
orta
kernel: wifi: mac80211: minstrel_ht: validate fixed rate index01:25 UTC derlemesi
CVE-2026-98702
orta
kernel: kernel: Denial of Service via invalid channel switch frame in mac8021101:25 UTC derlemesi
CVE-2026-98701
orta
kernel: wifi: mac80211: release mesh path quota on failed additions01:25 UTC derlemesi
CVE-2026-98699
orta
kernel: wifi: mac80211: fix mesh fast xmit path deletion UAF01:25 UTC derlemesi
CVE-2026-98687
orta
kernel: thunderbolt: Reject oversized XDomain properties responses01:25 UTC derlemesi
CVE-2026-98678
orta
kernel: iio: adc: ad4030: fix invalid oversampling_ratio validation01:25 UTC derlemesi
CVE-2026-98677
orta
kernel: iio: adc: ad_sigma_delta: fix use-after-free on unbind01:25 UTC derlemesi
CVE-2026-98676
orta
kernel: iio: adc: ade9000: fix NULL pointer dereference in clkout registration01:25 UTC derlemesi
CVE-2026-98674
orta
kernel: iio: adc: adi-axi-adc: Initialize state mutex01:25 UTC derlemesi
CVE-2026-98673
orta
kernel: iio: adc: pac1934: check ACPI label duplication01:25 UTC derlemesi
CVE-2026-98670
orta
kernel: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind01:25 UTC derlemesi
CVE-2026-98669
orta
kernel: iio: buffer: serialize buffer teardown with mode claims01:25 UTC derlemesi
CVE-2026-98667
orta
kernel: iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data01:25 UTC derlemesi
CVE-2026-98666
orta
kernel: iio: gyro: adis16136: fix unprotected debugfs reads01:25 UTC derlemesi
CVE-2026-98665
orta
kernel: iio: health: max30102: fix NULL dereference in interrupt handler01:25 UTC derlemesi
CVE-2026-98664
orta
kernel: iio: imu: adis16400: fix unprotected debugfs reads01:25 UTC derlemesi
CVE-2026-98663
orta
kernel: iio: imu: adis16480: fix unprotected debugfs reads01:25 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.