İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.963 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 30 / 80

  • CVE-2026-89599
    33İzleyin

    fbdev: omapfb: panel-dsi-cm: initialize lock before registering display

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89600
    31İzleyin

    fanotify: fix use-after-free of file range info

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89601
    35İzleyin

    ext2: Fix lost inode updates for IS_SYNC inodes

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89602
    31İzleyin

    erofs: skip sufficiently large global buffers when resizing

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89605
    31İzleyin

    ecryptfs: release message context on send failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89606
    31İzleyin

    ecryptfs: reject too-small tag 70 packets

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89607
    31İzleyin

    ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89608
    28İzleyin

    ecryptfs: pass packet set buffer size to parser

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89609
    31İzleyin

    ecryptfs: hold msg ctx list lock when cleaning daemon queue

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89610
    39İzleyin

    ntfs: verify run length exceeding volume boundary

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89611
    39İzleyin

    ntfs: validate non-resident attribute offsets

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89612
    39İzleyin

    ntfs: reject invalid MFT LCNs from boot sector

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89613
    39İzleyin

    ntfs: reject invalid empty mapping pairs

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89614
    39İzleyin

    ntfs: bound the free-cluster bitmap scan to the volume

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89615
    33İzleyin

    fs/ntfs3: bound page_lcns[] index by the log record

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89616
    30İzleyin

    fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89617
    31İzleyin

    fs/ntfs3: validate dirty page table on log replay

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89619
    31İzleyin

    HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89620
    31İzleyin

    HID: intel-thc-hid: intel-quickspi: validate report size before copy

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89622
    31İzleyin

    HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89624
    31İzleyin

    HID: universal-pidff: stop the device when force-feedback init fails

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89626
    35İzleyin

    HID: sensor: custom: Fix field sysfs group cleanup on failure

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89630
    36İzleyin

    smb: client: restore the data_offset bound in is_valid_oplock_break()

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89631
    36İzleyin

    smb: client: reject a tree connect response whose byte count is too small

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89632
    32İzleyin

    smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89633
    39İzleyin

    smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89634
    36İzleyin

    smb: client: fix ALIGN() overflow in symlink_data() error context loop

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89635
    39İzleyin

    ksmbd: only rebind the reopened file's own oplock on durable reconnect

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89636
    39İzleyin

    smb: client: clear ce->tgthint in free_tgts()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89637
    39İzleyin

    smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89638
    31İzleyin

    smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89639
    28İzleyin

    cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89640
    28İzleyin

    cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89641
    31İzleyin

    cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89643
    39İzleyin

    audit: avoid dropping live tree ref on fsnotify rule autoremove

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89646
    31İzleyin

    ceph: fix leaked inode reference on writeback abort at umount

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89647
    30İzleyin

    ceph: do not repeat ceph_trim_dentries() if no progress possible

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89648
    30İzleyin

    ceph: cap delegated inode count in ceph_parse_deleg_inos()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89649
    36İzleyin

    ceph: bound xattr value length in __build_xattrs()

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89650
    36İzleyin

    ceph: bound num_export_targets array for mds info v2/v3

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89651
    39İzleyin

    ceph: bound MDSCapAuth path and fs_name decode in handle_session()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89652
    39İzleyin

    ceph: bound copied dentry name length in NFS export get_name

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89653
    39İzleyin

    ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89654
    39İzleyin

    ceph: fix UAF in check_new_map() on session freed during unlock

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89655
    39İzleyin

    ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89656
    39İzleyin

    libceph: reject buckets with mismatched CRUSH ids

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89657
    30İzleyin

    libceph: validate OSD extent maps before cursor advance

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89658
    39İzleyin

    NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89659
    39İzleyin

    NFSD: Prevent client use-after-free during delegation revoke

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89660
    39İzleyin

    NFSD: Prevent client use-after-free during admin state revocation

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89662
    39İzleyin

    NFSD: Prevent lock owner use-after-free during client teardown

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89663
    35İzleyin

    nfsd: revoke copy-notify stateids before dropping their reference

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89664
    30İzleyin

    nfsd: release OPEN-decoded posix ACLs via op_release

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89665
    32İzleyin

    nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89667
    32İzleyin

    nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89668
    31İzleyin

    nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89669
    39İzleyin

    nfsd: initialize copy-notify stateid before publishing it

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89670
    31İzleyin

    nfsd: hold rcu across localio cmpxchg retry

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89671
    36İzleyin

    nfsd: gate nfs3 setacl by argp->mask

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89672
    36İzleyin

    nfsd: gate nfs2 setacl by argp->mask

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89674
    39İzleyin

    nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89675
    39İzleyin

    nfsd: fix UAF in async copy cancel and shutdown

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89676
    39İzleyin

    nfsd: fix stale s2s_cp_stateids IDR entry for async COPY

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89677
    39İzleyin

    nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89678
    30İzleyin

    nfsd: fix partial-write detection in nfsd_direct_write

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89679
    30İzleyin

    nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89680
    30İzleyin

    nfsd: fix nfsd_file leak on inter-server COPY setup failure

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89681
    39İzleyin

    nfsd: fix layout fence worker double-reference race

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89682
    32İzleyin

    nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89684
    30İzleyin

    nfsd: fix cpntf publish race in nfs4_init_cp_state

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89685
    30İzleyin

    nfsd: fix clock domain mismatch in clients_still_reclaiming()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89686
    39İzleyin

    nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89687
    30İzleyin

    nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89688
    39İzleyin

    nfsd: drop the stateid, not the stateowner, on seqid_op replay retry

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89689
    39İzleyin

    nfsd: don't free session slots that are still in use

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89690
    31İzleyin

    nfsd: defer vfree of compound ops to fix rpc_status UAF

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89691
    28İzleyin

    nfsd: clear opcnt on compound arg release to prevent OOB read

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89692
    30İzleyin

    nfsd: clear CALLBACK_RUNNING on failed delegation recall queue

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89695
    30İzleyin

    nfsd: cap decoded POSIX ACL count to bound sort cost

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89696
    30İzleyin

    nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89697
    36İzleyin

    nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89699
    30İzleyin

    nfsd: validate symlink target length in NFSv4 CREATE

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89702
    39İzleyin

    nfsd: size fh_verify server sockaddr slot by xpt_locallen

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89703
    39İzleyin

    nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89704
    30İzleyin

    nfsd: sample writeback error cursor before async COPY loop

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89705
    28İzleyin

    nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89706
    30İzleyin

    nfsd: Reset write verifier when async COPY writeback fails

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89707
    30İzleyin

    nfsd: release path refs on follow_down() error

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89708
    39İzleyin

    nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89709
    32İzleyin

    lockd, nfsd: RCU-protect nlmsvc_ops dispatch

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89711
    32İzleyin

    NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89712
    39İzleyin

    NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89713
    36İzleyin

    NFSD: check truncate permission under inode lock

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89720
    30İzleyin

    ubifs: fix out-of-bounds read in signature length check

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89723
    31İzleyin

    nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89724
    31İzleyin

    media: vicodec: fix out-of-bounds write in FWHT encoder

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89725
    35İzleyin

    media: cec: stm32: prevent out-of-bounds write on RX overflow

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89729
    35İzleyin

    HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89731
    28İzleyin

    cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-89733
    31İzleyin

    usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları · sayfa 30 — Noroxi