Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98533
orta
kernel: ipe: protect the dm-verity root hash with RCU01:25 UTC derlemesi
CVE-2026-98530
orta
kernel: kprobes: Fix permanent hang when flushing the kprobe optimizer01:25 UTC derlemesi
CVE-2026-98523
orta
kernel: drm/client: fix restore of partially initialized client01:25 UTC derlemesi
CVE-2026-98520
orta
kernel: drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping01:25 UTC derlemesi
CVE-2026-98504
orta
kernel: PCI: of_property: Omit bus properties without a subordinate bus01:25 UTC derlemesi
CVE-2026-98503
orta
kernel: packet: use ubuf_info completion for TX_RING packets01:25 UTC derlemesi
CVE-2026-98500
orta
kernel: HID: hid-oxp: use cancel_delayed_work_sync() in remove01:25 UTC derlemesi
CVE-2026-98496
orta
kernel: net: airoha: npu: cancel wdt_work after releasing the WDT IRQ01:25 UTC derlemesi
CVE-2026-98493
orta
kernel: net: ipconfig: bound DHCP option construction01:25 UTC derlemesi
CVE-2026-98491
orta
kernel: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry01:25 UTC derlemesi
CVE-2026-98483
orta
kernel: nfc: fix use-after-free in nfc_get_local_general_bytes01:25 UTC derlemesi
CVE-2026-98474
orta
kernel: s390/pci: Fix missing device lock in zpci_report_status()01:25 UTC derlemesi
CVE-2026-98463
orta
kernel: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags01:25 UTC derlemesi
CVE-2026-98462
orta
kernel: Bluetooth: hci_conn: fix CIS hold ownership on reuse01:25 UTC derlemesi
CVE-2026-98459
orta
kernel: Bluetooth: ISO: balance the parent hold in hci_bind_bis()01:25 UTC derlemesi
CVE-2026-98457
orta
kernel: Bluetooth: L2CAP: validate frame length before control and FCS access01:25 UTC derlemesi
CVE-2026-98456
orta
kernel: Bluetooth: mgmt: fix race in read_unconf_index_list()01:25 UTC derlemesi
CVE-2026-98449
orta
kernel: smb: client: delete compound mids on send failure before unlock01:25 UTC derlemesi
CVE-2026-98447
orta
kernel: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots01:25 UTC derlemesi
CVE-2026-98446
orta
kernel: xfs: don't let hidden_space go negative in xfs_metafile_resv_init01:25 UTC derlemesi
CVE-2026-98444
orta
kernel: xfs: drop dquot flush lock when we can't find a buffer to flush01:25 UTC derlemesi
CVE-2026-98441
orta
kernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entry01:25 UTC derlemesi
CVE-2026-98440
orta
kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction01:25 UTC derlemesi
CVE-2026-98439
orta
kernel: smb/server: cancel async requests when closing connection01:25 UTC derlemesi
CVE-2026-98435
orta
kernel: EDAC/altera: Use parent device for devres in altr_portb_setup()01:25 UTC derlemesi
CVE-2026-112058
orta
libdvdnav: libdvdnav: Denial of Service via out-of-bounds read in set_PTT01:25 UTC derlemesi
CVE-2026-112057
orta
libdvdnav: libdvdnav: Denial of Service via crafted disc image01:25 UTC derlemesi
CVE-2026-112008
orta
libmng: libmng: Denial of Service via heap-based buffer overflow in mng_read_ordr()01:25 UTC derlemesi
CVE-2026-89096
orta
nfs-utils: nfs-utils: Denial of Service via memory leak in rpc.statd01:25 UTC derlemesi
CVE-2026-110759
orta
perl-text-csv_xs: Text::CSV_XS: Data corruption via trailing carriage return in empty fields01:25 UTC derlemesi
CVE-2026-110758
orta
perl-text-csv_xs: Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace stripping01:25 UTC derlemesi
CVE-2026-110757
orta
perl-text-csv_xs: Text::CSV_XS: CSV record splitting via unquoted numeric fields01:25 UTC derlemesi
CVE-2026-110756
orta
perl-text-csv_xs: Text::CSV_XS: Data corruption via invalid UTF-8 byte sequences01:25 UTC derlemesi
CVE-2026-110755
orta
perl-text-csv_xs: Text::CSV_XS: Denial of Service via crafted carriage return line endings01:25 UTC derlemesi
CVE-2026-110754
orta
perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsing01:25 UTC derlemesi
CVE-2026-110753
orta
perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rows01:25 UTC derlemesi
CVE-2026-85977
orta
libtirpc: libtirpc: Denial of Service via unbounded memory allocation during portmapper response decoding01:25 UTC derlemesi
CVE-2026-85231
orta
libtirpc: libtirpc: Denial of service via unbounded memory allocation during RPCSEC_GSS decoding01:25 UTC derlemesi
CVE-2026-89098
orta
nfs-utils: nfs-utils: Denial of Service via assertion failure in fsidd01:25 UTC derlemesi
CVE-2026-46471
orta
gstreamer1-plugins-good: gstreamer1-plugins-good: information disclosure via out-of-bounds read during MP4 parsing01:25 UTC derlemesi
CVE-2026-111555
orta
luksmeta: Missing slot-range validation permits out-of-gap device I/O01:25 UTC derlemesi
CVE-2026-111269
orta
libical: libical: Denial of Service via out-of-bounds read in icalvalue_decode_ical_string()01:25 UTC derlemesi
CVE-2026-111157
orta
sox: sox: Denial of Service via crafted WAV file01:25 UTC derlemesi
CVE-2026-111141
orta
zziplib: zziplib: Denial of Service via out-of-bounds read in central directory parsing01:25 UTC derlemesi
CVE-2026-111137
orta
libsmi: libsmi: Denial of service via out-of-bounds write in smiValueAsString()01:25 UTC derlemesi
CVE-2026-111132
orta
libgxps: libgxps: Denial of Service via crafted XPS document01:25 UTC derlemesi
CVE-2026-110602
orta
libmspack: libmspack: Memory corruption via uninitialized pointer free in kwajd_open01:25 UTC derlemesi
CVE-2026-98430
orta
kernel: RDMA/efa: Keep admin queues alive while IRQ is registered01:25 UTC derlemesi
CVE-2026-98405
orta
kernel: smb: client: fix missing iov bounds check in parse_posix_sids()01:25 UTC derlemesi
CVE-2026-100231
orta
gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect UTF-16 size calculation for non-BMP characters01:25 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.