Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 13:12 UTC

23critical, last 7 days 298high, last 7 days 633medium, last 7 days 139low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-106074 medium	nodejs: nodejs: predictable random values via snapshot entropy cache reuse	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-106072 medium	nodejs: nodejs: Authentication bypass via non-canonical IPv4 hostname verification	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-105481 medium	nodejs: nodejs: Response desynchronization via improper HTTP keep-alive connection reuse	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-55889 medium	xdg-desktop-portal: xdg-desktop-portal: unauthorized data disclosure via predictable token generation	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-98876 medium	kernel: host1x: bus: Fix missing ops null check in error teardown	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-98875 medium	kernel: drm/nouveau/gsp: add SEC2 to GA100 chip table	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-98872 medium	kernel: freevxfs: don't BUG() on unknown typed-extent type	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-98871 medium	kernel: crypto: ccp - Fix possible deadlock in SEV init failure path	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-98870 medium	kernel: ksmbd: remove stale channels from all sessions on teardown	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-115327 medium	libyang: libyang: Denial of Service via crafted NETCONF RPC action envelope	27 Oct 202601:25 UTC build	22 Oct 2026
CVE-2026-115207 medium	patch: Filename validation bypass in reversal fallback allows file creation outside the working directory	27 Oct 202601:25 UTC build	22 Oct 2026
CVE-2026-92822 medium	libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd YAML	27 Oct 202601:25 UTC build	21 Oct 2026
CVE-2026-114038 medium	device-mapper-multipath: device-mapper-multipath: Information disclosure via malformed format string	27 Oct 202601:25 UTC build	21 Oct 2026
CVE-2026-108518 medium	perl-dbi: perl-dbi: Denial of Service via type confusion in dbi_profile	27 Oct 202601:25 UTC build	20 Oct 2026
CVE-2026-92539 medium	grafana: Grafana: Unauthorized cross-organization user management via the SCIM API	27 Oct 202601:25 UTC build	20 Oct 2026
CVE-2026-113680 medium	harfbuzz: harfbuzz: Denial of Service via crafted font in WebAssembly shaper	27 Oct 202601:25 UTC build	20 Oct 2026
CVE-2026-113679 medium	harfbuzz: HarfBuzz: Out-of-bounds write via crafted font in WebAssembly shaper	27 Oct 202601:25 UTC build	20 Oct 2026
CVE-2026-113496 medium	cockpit-machines: VNC console password disclosure through virt-xml command-line arguments	27 Oct 202601:25 UTC build	20 Oct 2026
CVE-2026-113495 medium	cockpit-machines: RHSM access-token disclosure through image helper command-line arguments	27 Oct 202601:25 UTC build	20 Oct 2026
CVE-2026-101201 medium	qt5-qtbase: qt6-qt5compat: qt: Denial of Service via out-of-bounds read in QBinaryJson	27 Oct 202601:25 UTC build	20 Oct 2026
CVE-2026-8168 medium	qt5-qtsvg: qt6-qtsvg: qt: Denial of Service via deeply nested SVG elements	27 Oct 202601:25 UTC build	19 Oct 2026
CVE-2026-112283 medium	libbluray: libbluray: Denial of Service via uncontrolled memory allocation in clpi_parse	27 Oct 202601:25 UTC build	19 Oct 2026
CVE-2026-112276 medium	netpbm: netpbm: Denial of Service via out-of-bounds read in rasttopnm	27 Oct 202601:25 UTC build	19 Oct 2026
CVE-2026-112275 medium	netpbm: netpbm: Denial of Service via heap-based buffer overflow in rasttopnm	27 Oct 202601:25 UTC build	19 Oct 2026
CVE-2026-98868 medium	kernel: dm-pcache: reject a kset that overruns its segment	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98866 medium	kernel: sched/cache: Introduce task_struct->sched_cache_grp to fix UAF	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98864 medium	kernel: sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98863 medium	kernel: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98862 medium	kernel: audit: fix exe mark UAF in kill_rules()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98861 medium	kernel: kernel: Denial of Service via fprobe use-after-free	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98858 medium	kernel: io_uring: fix task_work add use-after-free with SQPOLL	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98856 medium	kernel: kprobes: Skip disarmed probes when checking optkprobe overlap	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98855 medium	kernel: of/overlay: put property on deadprops only after changeset add succeeds	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98854 medium	kernel: of/overlay: only treat a positive changeset id as registered	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98848 medium	kernel: rtc: ac100: Assign .num before accessing .hws	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98846 medium	kernel: sctp: check RCV_SHUTDOWN after the sendmsg connect wait	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98845 medium	kernel: tpm: Disable TPM on null key name mismatch	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98842 medium	kernel: module: fix lost error code from codetag_load_module()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98841 medium	kernel: virt: vmgenid: set driver_data before registering notification handlers	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98839 medium	kernel: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98837 medium	kernel: ALSA: caiaq: unregister the input device when probe fails	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98836 medium	kernel: ALSA: line6: reject oversized playback packets	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98835 medium	kernel: iio: accel: kionix-kx022a: Fix array boundary check	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98834 medium	kernel: mtd: core: avoid double-free of OTP NVMEM device	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98833 medium	kernel: mtd: core: call _get_device() with the master MTD	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98832 medium	kernel: blk-cgroup: save IRQ state in blkg_tryget_closest()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98829 medium	kernel: wifi: mac80211: drop oversized fragments to avoid extra_len overflow	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98827 medium	kernel: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98826 medium	kernel: kernel: Denial of service via use-after-free in the AC100 RTC driver	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98825 medium	kernel: rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()	27 Oct 202601:25 UTC build	18 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.