Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 13:12 UTC

23critical, last 7 days 298high, last 7 days 633medium, last 7 days 139low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-99080 low	kernel: fs: Free any excess xarray nodes in clear_inode()	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-99075 low	kernel: kernel: Denial of Service via memory leak in Rust Binder	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-99070 low	kernel: ipv6: do not warn on route notification size race	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-99068 low	kernel: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98885 low	kernel: ima: return error early if file xattr cannot be changed	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-115369 low	github.com/openbao/openbao: OpenBao: Unauthorized certificate issuance via CSR IP SAN validation bypass	27 Oct 202607:13 UTC build	22 Oct 2026
CVE-2026-116159 low	ImageMagick: ImageMagick: Denial of Service via memory leak in the -cdl option	27 Oct 202601:25 UTC build	25 Oct 2026
CVE-2026-116151 low	ImageMagick: ImageMagick: Denial of Service via memory leak in JNG encoder	27 Oct 202601:25 UTC build	25 Oct 2026
CVE-2026-116150 low	ImageMagick: ImageMagick: Denial of Service via memory leak in FPX encoder	27 Oct 202601:25 UTC build	25 Oct 2026
CVE-2026-116148 low	ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder	27 Oct 202601:25 UTC build	25 Oct 2026
CVE-2026-116147 low	ImageMagick: ImageMagick: Denial of service via unchecked memory allocation in DJVU decoder	27 Oct 202601:25 UTC build	25 Oct 2026
CVE-2026-116146 low	ImageMagick: ImageMagick: Denial of Service via MSL decoder memory leak	27 Oct 202601:25 UTC build	25 Oct 2026
CVE-2026-116144 low	ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder	27 Oct 202601:25 UTC build	25 Oct 2026
CVE-2026-106071 low	nodejs: nodejs: Permission model bypass via wildcard path matching flaw	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-106070 low	nodejs: Node.js: Security inspection bypass via crafted ZIP archive header mismatch	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-115449 low	libslirp: libslirp: ICMP echo reply length desynchronization leaks host IP to guest	27 Oct 202601:25 UTC build	22 Oct 2026
CVE-2026-114236 low	podman: Goroutine/file-descriptor leak in storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer on malformed layers	27 Oct 202601:25 UTC build	21 Oct 2026
CVE-2026-98844 low	kernel: netfs: clear post-EOF pagecache when extending a file via write	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98811 low	kernel: net/sched: cls_api: reclaim an empty proto on the error path	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98802 low	kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98777 low	kernel: binder: fix leaked fd fixups on TF_UPDATE_TXN supersede	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98774 low	kernel: rust_binder: cancel deferred work items in thread exit	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98700 low	kernel: wifi: mac80211: set info->band for 802.3 encap offload frames	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98691 low	kernel: thunderbolt: Tear down inactive DP tunnels when the domain is stopped	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98643 low	kernel: bpf: Fix out-of-bounds read of rtt_min in sock_ops	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98629 low	kernel: net/sched: cls_u32: fix manual hash table handle IDR aliasing	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98628 low	kernel: bpf: Make post-verification instruction rewrites killable	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98584 low	kernel: net/sched: fix potential stack infoleak in em_text_dump()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98560 low	kernel: net/rds: size a connection's path set by the transport it ends up with	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98458 low	kernel: Bluetooth: ISO: release unused CIS holds after channel attach	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98451 low	kernel: smb: client: use finish_no_open() for non-regular inodes	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98438 low	kernel: mptcp: options: fix uninit-value in mptcp_write_data_fin	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-111802 low	nautilus: nautilus: Arbitrary File Deletion via Trash Symlink	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-46472 low	gstreamer1-plugins-good: gstreamer1-plugins-good: Information disclosure via out-of-bounds read in qtdemux_parse_chnl	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-111581 low	libblockdev: libblockdev: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus method	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-98427 low	kernel: net/sched: codel: bound the dropping loop per dequeue call	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-98414 low	kernel: memcg: avoid charging the root memcg from obj_cgroup_charge_pages()	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-98402 low	kernel: net: icmp: avoid invalid transport header access in icmp_send tracepoint	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-98398 low	kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-98394 low	kernel: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-98393 low	kernel: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-98391 low	kernel: drm/xe: Guard page-fault worker with runtime PM check	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-98390 low	kernel: x86/amd_node: Avoid divide by zero on virtualized systems	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-98389 low	kernel: drm/amdgpu: skip gfx switch_power_profile during GPU reset	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-100229 low	gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-109278 low	ImageMagick: ImageMagick: Denial of Service via memory leak in wavelet-denoise operation	27 Oct 202601:25 UTC build	12 Oct 2026
CVE-2026-105081 low	ImageMagick: ImageMagick: Security policy bypass via symbolic link	27 Oct 202601:25 UTC build	12 Oct 2026
CVE-2026-98356 low	kernel: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup	27 Oct 202601:25 UTC build	6 Oct 2026
CVE-2026-104029 low	sssd: sssd: Denial of Service via out-of-bounds read in autofs responder	27 Oct 202601:25 UTC build	5 Oct 2026
CVE-2026-105712 low	gnupg2: gnupg: Arbitrary file overwrite via symlink traversal in gpgtar	27 Oct 202601:25 UTC build	5 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.