Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98660
orta
kernel: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup01:25 UTC derlemesi
CVE-2026-98658
orta
kernel: iio: proximity: aw96103: validate firmware data length01:25 UTC derlemesi
CVE-2026-98657
orta
kernel: iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure01:25 UTC derlemesi
CVE-2026-98656
orta
kernel: iio: trigger: cancel reenable_work before freeing trigger01:25 UTC derlemesi
CVE-2026-98652
orta
kernel: KVM: s390: Add missing srcu in kvm_s390_set_irq_state()01:25 UTC derlemesi
CVE-2026-98647
orta
kernel: bpf: Fix divide-by-zero in btf_struct_walk()01:25 UTC derlemesi
CVE-2026-98645
orta
kernel: HID: winwing: fix use-after-free in force feedback teardown01:25 UTC derlemesi
CVE-2026-98642
orta
kernel: bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk01:25 UTC derlemesi
CVE-2026-98641
orta
kernel: bpf, arm64: set up the frame pointer for the exception callback01:25 UTC derlemesi
CVE-2026-98638
orta
kernel: KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()01:25 UTC derlemesi
CVE-2026-98636
orta
kernel: squashfs: Add dictionary size range check to prevent shift-out-of-bounds01:25 UTC derlemesi
CVE-2026-98632
orta
kernel: Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel01:25 UTC derlemesi
CVE-2026-98627
orta
kernel: bpf: Preserve packet pointer class displacement in regsafe()01:25 UTC derlemesi
CVE-2026-98626
orta
kernel: bpf: Restrict CO-RE poisoning to relocatable instructions01:25 UTC derlemesi
CVE-2026-98625
orta
kernel: netfilter: flowtable: publish HW_DEAD after worker is done01:25 UTC derlemesi
CVE-2026-98624
orta
kernel: netfilter: nfnetlink_queue: hold nfnl mutex in event notifier01:25 UTC derlemesi
CVE-2026-98623
orta
kernel: drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update01:25 UTC derlemesi
CVE-2026-98620
orta
kernel: net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure01:25 UTC derlemesi
CVE-2026-98619
orta
kernel: net: ethtool: keep rtnl_lock for the ioctl self test01:25 UTC derlemesi
CVE-2026-98618
orta
kernel: eth: fbnic: Handle maximum standalone channels01:25 UTC derlemesi
CVE-2026-98617
orta
kernel: eth: fbnic: use the Rx queue napi pointer to find the napi vector01:25 UTC derlemesi
CVE-2026-98616
orta
kernel: eth: fbnic: reset num_napi when the napi vectors are freed01:25 UTC derlemesi
CVE-2026-98615
orta
kernel: eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox01:25 UTC derlemesi
CVE-2026-98602
orta
kernel: Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough01:25 UTC derlemesi
CVE-2026-98600
orta
kernel: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()01:25 UTC derlemesi
CVE-2026-98599
orta
kernel: bpf: Reject non-negative offsets in stack_slot_obj_get_spi()01:25 UTC derlemesi
CVE-2026-98593
orta
kernel: s390/debug: Fix NULL pointer dereference in debug_info_copy()01:25 UTC derlemesi
CVE-2026-98590
orta
kernel: bpf: Fix bpf_sock context code generation01:25 UTC derlemesi
CVE-2026-98589
orta
kernel: bpf: Reject pkt arguments in mutating subprogs01:25 UTC derlemesi
CVE-2026-98587
orta
kernel: firewire: cdev: fix back-transition for iso_resource_auto client resource01:25 UTC derlemesi
CVE-2026-98586
orta
kernel: sctp: hold asoc or transport before mod_timer() in timer handlers01:25 UTC derlemesi
CVE-2026-98583
orta
kernel: nfc: nfcmrvl: validate helper command length before pull01:25 UTC derlemesi
CVE-2026-98578
orta
kernel: nfc: st21nfca: validate ISO15693 inventory length01:25 UTC derlemesi
CVE-2026-98576
orta
kernel: nfc: llcp: fix slab-out-of-bounds reads when logging service names01:25 UTC derlemesi
CVE-2026-98574
orta
kernel: net: bcmgenet: stop Tx NAPI before disabling the queues01:25 UTC derlemesi
CVE-2026-98572
orta
kernel: bpf: Fix immediate JMP JEQ/JNE on MIPS3201:25 UTC derlemesi
CVE-2026-98571
orta
kernel: net: stmmac: clear stale buf->page after recycling on skb build failure01:25 UTC derlemesi
CVE-2026-98570
orta
kernel: net: ipv6: keep room for the mac header in dst_dev_overhead()01:25 UTC derlemesi
CVE-2026-98568
orta
kernel: vxlan: use one headroom snapshot for neighbour replies01:25 UTC derlemesi
CVE-2026-98566
orta
kernel: drm/imagination: clamp freelist reconstruction requests01:25 UTC derlemesi
CVE-2026-98565
orta
kernel: net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT762101:25 UTC derlemesi
CVE-2026-98564
orta
kernel: net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq01:25 UTC derlemesi
CVE-2026-98563
orta
kernel: net: phylink: record the PHY only once bringup cannot fail01:25 UTC derlemesi
CVE-2026-98562
orta
kernel: net: libwx: fix races in Tx timestamp handling01:25 UTC derlemesi
CVE-2026-98559
orta
kernel: net/smc: fix UAF on lgr list traversal in smcr_port_err()01:25 UTC derlemesi
CVE-2026-98557
orta
kernel: gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO01:25 UTC derlemesi
CVE-2026-98544
orta
kernel: bna: prevent IOC timer rearm during teardown01:25 UTC derlemesi
CVE-2026-98540
orta
kernel: fprobe: Terminate the fgraph_data list when the reservation is not filled01:25 UTC derlemesi
CVE-2026-98539
orta
kernel: fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga01:25 UTC derlemesi
CVE-2026-98534
orta
kernel: ipe: fix use-after-free when auditing a newly loaded policy01:25 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.