Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

IDVulnerabilityRated sincePublished
CVE-2026-98859
medium
kernel: kernel: Denial of service via use-after-free in HID multitouch driver07:11 UTC build
CVE-2026-98852
medium
kernel: net: extend IPv6 exthdr detection of tunneled packets07:11 UTC build
CVE-2026-98850
medium
kernel: net/packet: prevent TX_RING byte count overflow07:11 UTC build
CVE-2026-98849
medium
kernel: pfcp: fix socket lifetime on netdevice registration failure07:11 UTC build
CVE-2026-98847
medium
kernel: rtc: spear: initialize IRQ state before requesting alarm IRQ07:11 UTC build
CVE-2026-98843
medium
kernel: netfs: zero gaps in read-gaps folio to avoid writing back stale data07:11 UTC build
CVE-2026-98840
medium
kernel: kernel: Denial of Service via use-after-free in virtual console screen driver07:11 UTC build
CVE-2026-98838
medium
kernel: vt: skip screen update for DEC alignment test on backgroup consoles07:11 UTC build
CVE-2026-98830
medium
kernel: kernel: Denial of Service via buffer overflow in WFx Wi-Fi driver07:11 UTC build
CVE-2026-98828
medium
kernel: wifi: ath9k: reject short WMI command responses07:11 UTC build
CVE-2026-98822
medium
kernel: wifi: mac80211: prevent AP VLAN tx from other interfaces07:11 UTC build
CVE-2026-98821
medium
kernel: block: reject polled dio with user integrity metadata07:11 UTC build
CVE-2026-98816
medium
kernel: bpf: Fix overflow of jump offset in constant blinding07:11 UTC build
CVE-2026-98812
medium
kernel: net/mctp: publish the mctp_dev only after it is initialised07:11 UTC build
CVE-2026-98810
medium
kernel: wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()07:11 UTC build
CVE-2026-98808
medium
kernel: net: systemport: Fix buffer overflow in bcm_sysport_get_stats()07:11 UTC build
CVE-2026-98806
medium
kernel: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled07:11 UTC build
CVE-2026-98801
medium
kernel: kernel: Denial of Service via improper socket memory reservation handling07:11 UTC build
CVE-2026-98789
medium
kernel: bpf: Fix objects stuck in free_by_rcu_ttrace07:11 UTC build
CVE-2026-98785
medium
kernel: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend07:11 UTC build
CVE-2026-98778
medium
kernel: binder: fix is_failure flag for superseded transaction cleanup07:11 UTC build
CVE-2026-98775
medium
kernel: nitro_enclaves: fix use-after-free on SLOT_ALLOC failure07:11 UTC build
CVE-2026-98773
medium
kernel: USB: cdc-acm: skip URB restart in port_shutdown if disconnected07:11 UTC build
CVE-2026-98772
medium
kernel: USB: serial: fix port tear down use-after-free07:11 UTC build
CVE-2026-98768
medium
kernel: kernel: Denial of Service via race condition during ANX7411 driver removal07:11 UTC build
CVE-2026-98761
medium
kernel: usb: typec: tcpm: recover after failure to start the frs ams07:11 UTC build
CVE-2026-98760
medium
kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()07:11 UTC build
CVE-2026-98759
medium
kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()07:11 UTC build
CVE-2026-98753
medium
kernel: tty: tty_port: restore TTY_IO_ERROR on activation failure07:11 UTC build
CVE-2026-98750
medium
kernel: kernel: use-after-free via race condition in TTY device registration07:11 UTC build
CVE-2026-98745
medium
kernel: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems07:11 UTC build
CVE-2026-98744
medium
kernel: ASoC: codecs: max98363: fix uninitialized stream_config->type07:11 UTC build
CVE-2026-98743
medium
kernel: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type07:11 UTC build
CVE-2026-98739
medium
kernel: Bluetooth: RFCOMM: Fix initial port reference race07:11 UTC build
CVE-2026-98736
medium
kernel: Bluetooth: hci_conn: Lock parent access during enhanced SCO setup07:11 UTC build
CVE-2026-98733
medium
kernel: kernel: Denial of Service via use-after-free in Bluetooth ISO packet queueing07:11 UTC build
CVE-2026-98731
medium
kernel: Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()07:11 UTC build
CVE-2026-98729
medium
kernel: x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h07:11 UTC build
CVE-2026-98727
medium
kernel: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known07:11 UTC build
CVE-2026-98726
medium
kernel: nvme-multipath: fix underflow in ANA log bounds checks07:11 UTC build
CVE-2026-98724
medium
kernel: nvmet: pci-epf: reject too-short SGL segments07:11 UTC build
CVE-2026-98723
medium
kernel: nvmet: copy the hostid into the ctrl before creating PR pc_refs07:11 UTC build
CVE-2026-98719
medium
kernel: KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it07:11 UTC build
CVE-2026-98717
medium
kernel: KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy07:11 UTC build
CVE-2026-98709
medium
kernel: kernel: mac80211: Denial of Service via use-after-free during channel switching07:11 UTC build
CVE-2026-98705
medium
kernel: wifi: mac80211: account proxy paths against the mesh path limit07:11 UTC build
CVE-2026-98698
medium
kernel: wifi: mac80211: handle empty FILS association request payload07:11 UTC build
CVE-2026-98696
medium
kernel: USB: serial: fix driver deregistration order07:11 UTC build
CVE-2026-98695
medium
kernel: USB: serial: fix ioctl hangup race07:11 UTC build
CVE-2026-98694
medium
kernel: thunderbolt: Fix KASAN reported use-after-free when request is canceled07:11 UTC build

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.