Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-98533 medium	kernel: ipe: protect the dm-verity root hash with RCU	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98530 medium	kernel: kprobes: Fix permanent hang when flushing the kprobe optimizer	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98523 medium	kernel: drm/client: fix restore of partially initialized client	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98520 medium	kernel: drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98504 medium	kernel: PCI: of_property: Omit bus properties without a subordinate bus	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98503 medium	kernel: packet: use ubuf_info completion for TX_RING packets	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98500 medium	kernel: HID: hid-oxp: use cancel_delayed_work_sync() in remove	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98496 medium	kernel: net: airoha: npu: cancel wdt_work after releasing the WDT IRQ	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98493 medium	kernel: net: ipconfig: bound DHCP option construction	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98491 medium	kernel: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98483 medium	kernel: nfc: fix use-after-free in nfc_get_local_general_bytes	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98474 medium	kernel: s390/pci: Fix missing device lock in zpci_report_status()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98463 medium	kernel: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98462 medium	kernel: Bluetooth: hci_conn: fix CIS hold ownership on reuse	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98459 medium	kernel: Bluetooth: ISO: balance the parent hold in hci_bind_bis()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98457 medium	kernel: Bluetooth: L2CAP: validate frame length before control and FCS access	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98456 medium	kernel: Bluetooth: mgmt: fix race in read_unconf_index_list()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98449 medium	kernel: smb: client: delete compound mids on send failure before unlock	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98447 medium	kernel: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98446 medium	kernel: xfs: don't let hidden_space go negative in xfs_metafile_resv_init	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98444 medium	kernel: xfs: drop dquot flush lock when we can't find a buffer to flush	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98441 medium	kernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entry	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98440 medium	kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98439 medium	kernel: smb/server: cancel async requests when closing connection	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98435 medium	kernel: EDAC/altera: Use parent device for devres in altr_portb_setup()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-112058 medium	libdvdnav: libdvdnav: Denial of Service via out-of-bounds read in set_PTT	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-112057 medium	libdvdnav: libdvdnav: Denial of Service via crafted disc image	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-112008 medium	libmng: libmng: Denial of Service via heap-based buffer overflow in mng_read_ordr()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-89096 medium	nfs-utils: nfs-utils: Denial of Service via memory leak in rpc.statd	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-110759 medium	perl-text-csv_xs: Text::CSV_XS: Data corruption via trailing carriage return in empty fields	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-110758 medium	perl-text-csv_xs: Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace stripping	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-110757 medium	perl-text-csv_xs: Text::CSV_XS: CSV record splitting via unquoted numeric fields	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-110756 medium	perl-text-csv_xs: Text::CSV_XS: Data corruption via invalid UTF-8 byte sequences	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-110755 medium	perl-text-csv_xs: Text::CSV_XS: Denial of Service via crafted carriage return line endings	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-110754 medium	perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsing	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-110753 medium	perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rows	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-85977 medium	libtirpc: libtirpc: Denial of Service via unbounded memory allocation during portmapper response decoding	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-85231 medium	libtirpc: libtirpc: Denial of service via unbounded memory allocation during RPCSEC_GSS decoding	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-89098 medium	nfs-utils: nfs-utils: Denial of Service via assertion failure in fsidd	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-46471 medium	gstreamer1-plugins-good: gstreamer1-plugins-good: information disclosure via out-of-bounds read during MP4 parsing	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-111555 medium	luksmeta: Missing slot-range validation permits out-of-gap device I/O	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-111269 medium	libical: libical: Denial of Service via out-of-bounds read in icalvalue_decode_ical_string()	27 Oct 202601:25 UTC build	15 Oct 2026
CVE-2026-111157 medium	sox: sox: Denial of Service via crafted WAV file	27 Oct 202601:25 UTC build	15 Oct 2026
CVE-2026-111141 medium	zziplib: zziplib: Denial of Service via out-of-bounds read in central directory parsing	27 Oct 202601:25 UTC build	15 Oct 2026
CVE-2026-111137 medium	libsmi: libsmi: Denial of service via out-of-bounds write in smiValueAsString()	27 Oct 202601:25 UTC build	15 Oct 2026
CVE-2026-111132 medium	libgxps: libgxps: Denial of Service via crafted XPS document	27 Oct 202601:25 UTC build	15 Oct 2026
CVE-2026-110602 medium	libmspack: libmspack: Memory corruption via uninitialized pointer free in kwajd_open	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-98430 medium	kernel: RDMA/efa: Keep admin queues alive while IRQ is registered	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-98405 medium	kernel: smb: client: fix missing iov bounds check in parse_posix_sids()	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-100231 medium	gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect UTF-16 size calculation for non-BMP characters	27 Oct 202601:25 UTC build	14 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.