Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 13:12 UTC

23critical, last 7 days 298high, last 7 days 633medium, last 7 days 139low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-98824 medium	kernel: wifi: mac80211: validate TX status rate metadata	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98823 medium	kernel: wifi: cfg80211: preserve hidden-group beacon IE ownership	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98820 medium	kernel: blk-mq: set RQF_USE_SCHED when the operation is known	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98819 medium	kernel: Bluetooth: btintel: validate DDC record lengths	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98818 medium	kernel: mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98815 medium	kernel: nvme: fix cdev lifetime	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98814 medium	kernel: nvme: fix command effects log lifetime for multipath heads	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98813 medium	kernel: bpf: Hold map BTF for the memory allocator destructor record	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98809 medium	kernel: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98807 medium	kernel: net/mlx5: Fix slab-out-of-bounds when handling team device events	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98804 medium	kernel: net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98803 medium	kernel: net: stmmac: fix rx Scatter-Gather support	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98800 medium	kernel: kernel: Denial of Service via use-after-free in BPF trampoline	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98799 medium	kernel: bpf: Skip detached progs in trampoline images that are still in use	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98798 medium	kernel: net: bcmgenet: fix NULL dereference in set_coalesce before first open	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98797 medium	kernel: net: cap skb->queue_mapping when the tx queue is picked	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98796 medium	kernel: net: ethernet: mtk_eth_soc: allocate dummy netdev sooner	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98795 medium	kernel: net: sparx5: skip ptp deinit if init was skipped	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98794 medium	kernel: ipvs: filter some flags received in the backup server	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98793 medium	kernel: netfilter: bpf: reject invalid NAT manipulation types	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98792 medium	kernel: netfilter: flowtable: generalize pending status bit	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98791 medium	kernel: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98790 medium	kernel: perf: Fix race between perf_event_exit_task() and perf_pending_task()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98788 medium	kernel: kernel: Privilege escalation via use-after-free during futex hash resizing	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98787 medium	kernel: bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98786 medium	kernel: drm/amd/display: guard dc_sink dereferences in MST mode validation	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98783 medium	kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98776 medium	kernel: kernel: Privilege escalation via binderfs use-after-free	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98770 medium	kernel: usb: gadget: midi2: Fix the jack descriptor array sizes	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98767 medium	kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98766 medium	kernel: usb: gadget: aspeed-vhub: cancel wake work on device removal	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98765 medium	kernel: USB: gadget: dummy-hcd: Fix wait for outstanding request completions	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98764 medium	kernel: usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98763 medium	kernel: usb: core: clear both ep_in and ep_out for non-ep0 control endpoints	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98762 medium	kernel: kernel: Denial of Service via use-after-free in USB DWC2 driver	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98758 medium	kernel: usb: typec: ucsi: glink: fix use-after-free of ucsi on remove	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98757 medium	kernel: usb: cdns3: fix use-after-free in cdns3_gadget_exit()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98756 medium	kernel: usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98754 medium	kernel: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98752 medium	kernel: tty: port: fix tty_port_tty_vhangup() race	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98751 medium	kernel: tty: abort break signalling on hangup	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98749 medium	kernel: kernel: Denial of Service via use-after-free in MAX3100 serial driver	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98748 medium	kernel: kernel: Denial of Service via use-after-free in Broadcom serial driver	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98747 medium	kernel: serial: core: fix NULL pointer dereference in serial_core_unregister_port()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98740 medium	kernel: EDAC/altera: Drop __init from ECC setup paths for re-probe safety	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98738 medium	kernel: kernel: denial of service via race condition in Bluetooth SMP remote OOB handling	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98737 medium	kernel: kernel: Denial of service via Bluetooth inquiry cache use-after-free	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98735 medium	kernel: Bluetooth: hci_core: Serialize ACL scheduling with channel deletion	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98734 medium	kernel: kernel: Denial of Service via use-after-free in Bluetooth connection scheduling	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98730 medium	kernel: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()	27 Oct 202601:25 UTC build	18 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.