Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

IDVulnerabilityRated sincePublished
CVE-2026-98595
low
kernel: udp: remove a disconnected socket from the 4-tuple hash table07:11 UTC build
CVE-2026-98594
low
kernel: tg3: clean up PHYLIB resources on probe failure07:11 UTC build
CVE-2026-98579
low
kernel: nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure07:11 UTC build
CVE-2026-98553
low
kernel: autofs: fix sbi->pipe file reference leak in autofs_kill_sb()07:11 UTC build
CVE-2026-98552
low
kernel: perf/core: Fix a refcount leak in attach_perf_ctx_data()07:11 UTC build
CVE-2026-98551
low
kernel: perf/core: Fill branch entries with a single assignment07:11 UTC build
CVE-2026-98542
low
kernel: cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict07:11 UTC build
CVE-2026-98535
low
kernel: fsl/fman: Fix clk reference leak in read_dts_node()07:11 UTC build
CVE-2026-98531
low
kernel: ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST07:11 UTC build
CVE-2026-98529
low
kernel: gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()07:11 UTC build
CVE-2026-98528
low
kernel: gpio: cdev: fix kernel stack leak to user-space in error path07:11 UTC build
CVE-2026-98527
low
kernel: gpio: zynq: fix runtime PM leak on request error path07:11 UTC build
CVE-2026-98519
low
kernel: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()07:11 UTC build
CVE-2026-98516
low
kernel: drm/nouveau: Fix bridge reference leak in nv1a_ram_new()07:11 UTC build
CVE-2026-98514
low
kernel: drm/nouveau: Fix gem reference leak in validate_init()07:11 UTC build
CVE-2026-98513
low
kernel: drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()07:11 UTC build
CVE-2026-98509
low
kernel: drm/virtio: fix memory leak of fence event on execbuffer failure07:11 UTC build
CVE-2026-98505
low
kernel: mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()07:11 UTC build
CVE-2026-98502
low
kernel: HID: alps: unregister DualPoint Stick input device on remove07:11 UTC build
CVE-2026-98498
low
kernel: net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()07:11 UTC build
CVE-2026-98492
low
kernel: net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths07:11 UTC build
CVE-2026-98486
low
kernel: net: ena: fix MMIO read buffer leak on probe failure07:11 UTC build
CVE-2026-98484
low
kernel: netfilter: nf_tables: skip expired catchall elements on insert and delete07:11 UTC build
CVE-2026-98480
low
kernel: nfc: trf7970a: power down on startup RX gain failure07:11 UTC build
CVE-2026-98473
low
kernel: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config07:11 UTC build
CVE-2026-98472
low
kernel: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV07:11 UTC build
CVE-2026-98468
low
kernel: KVM: arm64: Fix spurious warning for benign stage 2 teardown race07:11 UTC build
CVE-2026-98450
low
kernel: smb: client: close completed creates on compound wait errors07:11 UTC build
CVE-2026-98448
low
kernel: xfs: release orphanage dir inode if chown fails07:11 UTC build
CVE-2026-98437
low
kernel: media: qcom: iris: fix runtime PM reference leaks07:11 UTC build
CVE-2026-98433
low
kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure07:11 UTC build
CVE-2026-17591
low
libarchive: libarchive: use-after-free via aliased Mac metadata copy07:11 UTC build
CVE-2026-62438
low
gimp: gimp: PAA integer overflow out-of-bounds read07:11 UTC build
CVE-2026-84823
low
org.wildfly.core: WildFly: Path traversal in take-snapshot discloses the server configuration to the Monitor role07:11 UTC build
CVE-2026-55467
low
cups: cups: Denial of Service via unsanitized fax job attributes07:11 UTC build
CVE-2026-77564
low
Talos Linux: Support bundle does not redact registry credentials07:11 UTC build
CVE-2026-98431
low
kernel: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency07:11 UTC build
CVE-2026-98425
low
kernel: wifi: mac80211: don't warn when an IBSS has no channel to scan07:11 UTC build
CVE-2026-98424
low
kernel: wifi: cfg80211: undo netns switch if renaming the wiphy fails07:11 UTC build
CVE-2026-98422
low
kernel: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown07:11 UTC build
CVE-2026-98421
low
kernel: wifi: mac80211: require a peer station for TDLS setup confirm07:11 UTC build
CVE-2026-98406
low
kernel: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver07:11 UTC build
CVE-2026-98404
low
kernel: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()07:11 UTC build
CVE-2026-98400
low
kernel: s390/ipl: Fix NULL deref in kdump without re-IPL parm block07:11 UTC build
CVE-2026-98399
low
kernel: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block07:11 UTC build
CVE-2026-98388
low
kernel: exec: do_close_on_exec() before taking exec_update_lock07:11 UTC build
CVE-2026-98387
low
kernel: s390/crypto: Fix skcipher_walk return code handling in aes_s39007:11 UTC build
CVE-2026-98386
low
kernel: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot07:11 UTC build
CVE-2026-88842
low
busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption07:11 UTC build
CVE-2026-77205
low
libreswan: Denial of Service via sending bogus X.509 certificates07:11 UTC build

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.