Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-98862 medium	kernel: audit: fix exe mark UAF in kill_rules()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98861 medium	kernel: kernel: Denial of Service via fprobe use-after-free	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98858 medium	kernel: io_uring: fix task_work add use-after-free with SQPOLL	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98856 medium	kernel: kprobes: Skip disarmed probes when checking optkprobe overlap	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98855 medium	kernel: of/overlay: put property on deadprops only after changeset add succeeds	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98854 medium	kernel: of/overlay: only treat a positive changeset id as registered	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98848 medium	kernel: rtc: ac100: Assign .num before accessing .hws	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98846 medium	kernel: sctp: check RCV_SHUTDOWN after the sendmsg connect wait	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98845 medium	kernel: tpm: Disable TPM on null key name mismatch	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98842 medium	kernel: module: fix lost error code from codetag_load_module()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98841 medium	kernel: virt: vmgenid: set driver_data before registering notification handlers	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98839 medium	kernel: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98837 medium	kernel: ALSA: caiaq: unregister the input device when probe fails	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98836 medium	kernel: ALSA: line6: reject oversized playback packets	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98835 medium	kernel: iio: accel: kionix-kx022a: Fix array boundary check	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98834 medium	kernel: mtd: core: avoid double-free of OTP NVMEM device	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98833 medium	kernel: mtd: core: call _get_device() with the master MTD	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98832 medium	kernel: blk-cgroup: save IRQ state in blkg_tryget_closest()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98829 medium	kernel: wifi: mac80211: drop oversized fragments to avoid extra_len overflow	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98827 medium	kernel: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98826 medium	kernel: kernel: Denial of service via use-after-free in the AC100 RTC driver	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98825 medium	kernel: rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98824 medium	kernel: wifi: mac80211: validate TX status rate metadata	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98823 medium	kernel: wifi: cfg80211: preserve hidden-group beacon IE ownership	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98820 medium	kernel: blk-mq: set RQF_USE_SCHED when the operation is known	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98819 medium	kernel: Bluetooth: btintel: validate DDC record lengths	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98818 medium	kernel: mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98815 medium	kernel: nvme: fix cdev lifetime	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98814 medium	kernel: nvme: fix command effects log lifetime for multipath heads	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98813 medium	kernel: bpf: Hold map BTF for the memory allocator destructor record	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98809 medium	kernel: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98807 medium	kernel: net/mlx5: Fix slab-out-of-bounds when handling team device events	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98804 medium	kernel: net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98803 medium	kernel: net: stmmac: fix rx Scatter-Gather support	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98800 medium	kernel: kernel: Denial of Service via use-after-free in BPF trampoline	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98799 medium	kernel: bpf: Skip detached progs in trampoline images that are still in use	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98798 medium	kernel: net: bcmgenet: fix NULL dereference in set_coalesce before first open	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98797 medium	kernel: net: cap skb->queue_mapping when the tx queue is picked	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98796 medium	kernel: net: ethernet: mtk_eth_soc: allocate dummy netdev sooner	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98795 medium	kernel: net: sparx5: skip ptp deinit if init was skipped	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98794 medium	kernel: ipvs: filter some flags received in the backup server	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98793 medium	kernel: netfilter: bpf: reject invalid NAT manipulation types	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98792 medium	kernel: netfilter: flowtable: generalize pending status bit	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98791 medium	kernel: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98790 medium	kernel: perf: Fix race between perf_event_exit_task() and perf_pending_task()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98788 medium	kernel: kernel: Privilege escalation via use-after-free during futex hash resizing	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98787 medium	kernel: bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98786 medium	kernel: drm/amd/display: guard dc_sink dereferences in MST mode validation	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98783 medium	kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98776 medium	kernel: kernel: Privilege escalation via binderfs use-after-free	27 Oct 202601:25 UTC build	18 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.