Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated28 Oct 2026, 01:21 UTC

27critical, last 7 days 324high, last 7 days 661medium, last 7 days 104low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-98423 medium	kernel: wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98420 medium	kernel: ksmbd: follow SMB2 session expiration semantics	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98419 medium	kernel: drop_monitor: fix out-of-bounds write in reset_per_cpu_data()	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98418 medium	kernel: sched/core: Avoid false migration warning for proxy donors	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98416 medium	kernel: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98415 medium	kernel: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98413 medium	kernel: selinux: always fill AVC decision in avc_has_perm_noaudit()	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98412 medium	kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98411 medium	kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98410 medium	kernel: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98409 medium	kernel: watchdog: rtd119x: Avoid division by zero	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98408 medium	kernel: watchdog: rzv2h: Avoid division by zero	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98407 medium	kernel: wifi: rsi: fix heap OOB write on key removal	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98403 medium	kernel: s390/boot: Avoid IPL parameter append past command line	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98401 medium	kernel: net: iptunnel: fix stale transport header during tunnel decapsulation	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98397 medium	kernel: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98396 medium	kernel: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98395 medium	kernel: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-98392 medium	kernel: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-109968 medium	clevis: clevis: PKCS#11 LUKS passphrase logged in plaintext to world-readable file	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-88829 medium	busybox: busybox: HTTP request smuggling via pipelined requests in httpd reverse proxy	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-109971 medium	clevis: clevis: PKCS#11 token PIN exposed on command line via pkcs11-tool	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-109970 medium	clevis: clevis: PKCS#11 token PIN written to world-readable file	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-109969 medium	clevis: clevis: no authentication on PKCS#11 AF_UNIX sockets allows key injection under permissive umask	since at least 24 Oct 202607:11 UTC build	14 Oct 2026
CVE-2026-84790 medium	OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to ...	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-77207 medium	libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-77206 medium	libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110142 medium	chromium-browser: Use after free in FileSystem	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-56826 medium	Shopping privilege escalation through missing authorization in Settings components	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
GHSA-86xp-94pg-8r6r medium	Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96303 medium	Microsoft PowerShell Security Feature Bypass Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96238 medium	dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96234 medium	dotnet: .NET Information Disclosure Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96229 medium	dotnet: .NET Information Disclosure Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-85790 medium	Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-85747 medium	Distribution is a toolkit to pack, ship, store, and deliver container ...	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-70196 medium	dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-70194 medium	dotnet: .NET Framework Security Feature Bypass Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-70165 medium	dotnet: dotnet: Local privilege escalation via improper link resolution	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-70162 medium	dotnet: dotnet: Denial of Service via specially crafted web requests	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-66822 medium	dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-93294 medium	grafana: Grafana: Information disclosure via Azure Monitor resource proxy	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-33374 medium	grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-15577 medium	grafana: Grafana: Unauthorized configuration modification via status subresource	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-88838 medium	busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-88833 medium	busybox: busybox: udhcpc integer underflow in DHCP packet length calculation causes denial of service	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-109828 medium	libsndfile: libsndfile: Information disclosure via uninitialized variable use in WAV parsing	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-104250 medium	unstructured: Stored XSS via unescaped HTML generation	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-79611 medium	xen: xen: Denial of Service of guest virtual machines via VM entry failure	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-79609 medium	xen: Xen: Denial of Service via guest page table access beyond direct memory mapping	since at least 24 Oct 202607:11 UTC build	13 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.