Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated28 Oct 2026, 01:21 UTC

27critical, last 7 days 324high, last 7 days 661medium, last 7 days 104low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-98693 medium	kernel: thunderbolt: Hold a router reference for each allocated HopID	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98689 medium	kernel: thunderbolt: Don't access a DP tunnel after its DPRX read was canceled	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98688 medium	kernel: thunderbolt: Fix NULL dereference in tb_remove_work()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98681 medium	kernel: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98672 medium	kernel: iio: adc: stm32-adc: fix possible division by zero in processed channel	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98662 medium	kernel: kernel: Denial of Service via use-after-free during gp2ap020a00f device removal	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98653 medium	kernel: KVM: s390: Fix _gaccess_shadow_fault()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98651 medium	kernel: KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98650 medium	kernel: KVM: s390: Fix potential races in dat skey functions	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98649 medium	kernel: KVM: s390: Fix race in _destroy_pages_crste()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98648 medium	kernel: s390/uv: Prevent potential out-of-bounds read	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98646 medium	kernel: tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98644 medium	kernel: bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98640 medium	kernel: HID: amd_sfh: Validate PCI BAR size before mapping	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98637 medium	kernel: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98635 medium	kernel: scsi: block: Fix zones_cond out-of-bounds write on zone report	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98634 medium	kernel: scsi: sd_zbc: Reject disks with too many zones	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98631 medium	kernel: xsk: Use a 32-bit compare in xsk_map_gen_lookup	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98630 medium	kernel: eth: fbnic: Fix payload page pool error cleanup	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98622 medium	kernel: net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98613 medium	kernel: bpf: Bound ownership depth through local kptrs and graph roots	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98612 medium	kernel: net: usb: catc: bound the RX packet length in catc_rx_done()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98611 medium	kernel: bpf: Check params size before reading reserved fields	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98610 medium	kernel: net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98606 medium	kernel: drm/virtio: release the GEM object on virtio_gpu_vram_create() errors	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98605 medium	kernel: drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98601 medium	kernel: Bluetooth: btintel_pcie: validate device-supplied DMA indices	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98598 medium	kernel: ipv6: Prevent rt6_insert_exception() for dying fib6_info	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98597 medium	kernel: net: usb: sr9700: include receive overhead in the length check	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98596 medium	kernel: ipv6: Fix dst leak for uncached routes	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98592 medium	kernel: net: spacemit: clear TX descriptor on fragment mapping failure	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98591 medium	kernel: bpf: Fix bounds check for skb-backed dynptrs	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98588 medium	kernel: bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98585 medium	kernel: eth: fbnic: Avoid rounding zero ring sizes	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98582 medium	kernel: nfc: st21nfca: validate received frame size	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98581 medium	kernel: nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98580 medium	kernel: nfc: llcp: Fix race condition in accept_queue lifecycle	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98577 medium	kernel: nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98575 medium	kernel: nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98569 medium	kernel: ip_gre: Reject enabling collect metadata through changelink	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98567 medium	kernel: net: xps: reject an out of range traffic class	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98561 medium	kernel: nfp: hold IPsec RX state under the XArray lock	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98558 medium	kernel: net: flush skb_defer_nodes in dev_cpu_dead()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98556 medium	kernel: gve: DQO: reject TSO packets with an out of range MSS	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98555 medium	kernel: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98554 medium	kernel: vlan: ensure sufficient headroom in vlan_dev_hard_header()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98549 medium	kernel: tcp: prevent collapsing skbs across boundary in rtx queue	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98547 medium	kernel: af_packet: fix integer overflow in prb_calc_retire_blk_tmo()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98546 medium	kernel: arm64/boot: Disable trapping of PMZR_EL0 writes to EL2	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98545 medium	kernel: ata: libata-scsi: bound the ATA passthru sense descriptor writes	since at least 24 Oct 202607:11 UTC build	18 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.