Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-98770 medium	kernel: usb: gadget: midi2: Fix the jack descriptor array sizes	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98767 medium	kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98766 medium	kernel: usb: gadget: aspeed-vhub: cancel wake work on device removal	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98765 medium	kernel: USB: gadget: dummy-hcd: Fix wait for outstanding request completions	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98764 medium	kernel: usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98763 medium	kernel: usb: core: clear both ep_in and ep_out for non-ep0 control endpoints	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98762 medium	kernel: kernel: Denial of Service via use-after-free in USB DWC2 driver	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98758 medium	kernel: usb: typec: ucsi: glink: fix use-after-free of ucsi on remove	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98757 medium	kernel: usb: cdns3: fix use-after-free in cdns3_gadget_exit()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98756 medium	kernel: usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98754 medium	kernel: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98752 medium	kernel: tty: port: fix tty_port_tty_vhangup() race	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98751 medium	kernel: tty: abort break signalling on hangup	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98749 medium	kernel: kernel: Denial of Service via use-after-free in MAX3100 serial driver	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98748 medium	kernel: kernel: Denial of Service via use-after-free in Broadcom serial driver	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98747 medium	kernel: serial: core: fix NULL pointer dereference in serial_core_unregister_port()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98740 medium	kernel: EDAC/altera: Drop __init from ECC setup paths for re-probe safety	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98738 medium	kernel: kernel: denial of service via race condition in Bluetooth SMP remote OOB handling	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98737 medium	kernel: kernel: Denial of service via Bluetooth inquiry cache use-after-free	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98735 medium	kernel: Bluetooth: hci_core: Serialize ACL scheduling with channel deletion	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98734 medium	kernel: kernel: Denial of Service via use-after-free in Bluetooth connection scheduling	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98730 medium	kernel: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98722 medium	kernel: mtd: block2mtd: Fix divide error when erase_size is zero	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98721 medium	kernel: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98720 medium	kernel: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98714 medium	kernel: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98713 medium	kernel: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98712 medium	kernel: KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98711 medium	kernel: kernel: cw1200: Information disclosure via out-of-bounds read during frame transmission	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98708 medium	kernel: kernel: mac80211: Denial of Service via use-after-free in channel context replacement	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98707 medium	kernel: wifi: mac80211: shut down RX BA session timer on teardown	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98706 medium	kernel: wifi: mac80211: drain PS delivery work during station teardown	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98704 medium	kernel: wifi: mac80211: keep fallback association elements alive	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98703 medium	kernel: wifi: mac80211: minstrel_ht: validate fixed rate index	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98702 medium	kernel: kernel: Denial of Service via invalid channel switch frame in mac80211	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98701 medium	kernel: wifi: mac80211: release mesh path quota on failed additions	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98699 medium	kernel: wifi: mac80211: fix mesh fast xmit path deletion UAF	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98687 medium	kernel: thunderbolt: Reject oversized XDomain properties responses	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98678 medium	kernel: iio: adc: ad4030: fix invalid oversampling_ratio validation	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98677 medium	kernel: iio: adc: ad_sigma_delta: fix use-after-free on unbind	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98676 medium	kernel: iio: adc: ade9000: fix NULL pointer dereference in clkout registration	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98674 medium	kernel: iio: adc: adi-axi-adc: Initialize state mutex	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98673 medium	kernel: iio: adc: pac1934: check ACPI label duplication	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98670 medium	kernel: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98669 medium	kernel: iio: buffer: serialize buffer teardown with mode claims	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98667 medium	kernel: iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98666 medium	kernel: iio: gyro: adis16136: fix unprotected debugfs reads	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98665 medium	kernel: iio: health: max30102: fix NULL dereference in interrupt handler	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98664 medium	kernel: iio: imu: adis16400: fix unprotected debugfs reads	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98663 medium	kernel: iio: imu: adis16480: fix unprotected debugfs reads	27 Oct 202601:25 UTC build	18 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.