Multiple vulnerabilities in Red Hat Linux kernel (August 21, 2026)

unknownCVE-2026-68388 CVE-2026-53374 CVE-2025-39902 CVE-2026-63879 CVE-2026-63888 CVE-2024-56602

Multiple vulnerabilities have been discovered in Red Hat Linux kernel. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

CSIRTS triage

vendor: Red Hat product: Linux kernel Remote code execution Privilege escalation Denial of service

What: Multiple vulnerabilities in Red Hat Linux kernel enable remote code execution, privilege escalation, and denial of service.
Who is affected: Red Hat Linux systems running affected kernel versions.
Urgency: Remote code execution capability present; high priority for kernel updates.
Action: Update to the patched Red Hat Linux kernel version addressing CVE-2026-68388, CVE-2026-53374, CVE-2025-39902, CVE-2026-63879, CVE-2026-63888, CVE-2024-56602, CVE-2026-46120, and CVE-2026-53329.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Linux kernel

Get an email when a new Linux kernel advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-08-21
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1065/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-683880.52% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 42% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-533740.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2025-399020.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-638790.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-638880.74% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 52% of all EPSS-scored CVEs.
Low exploitation riskCVE-2024-566020.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 14% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-461200.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-533290.14% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-638840.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-640480.48% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 39% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-68388	coverage & exploitation status	NVD · CVE.org
CVE-2026-53374	coverage & exploitation status	NVD · CVE.org
CVE-2025-39902	coverage & exploitation status	NVD · CVE.org
CVE-2026-63879	coverage & exploitation status	NVD · CVE.org
CVE-2026-63888	coverage & exploitation status	NVD · CVE.org
CVE-2024-56602	coverage & exploitation status	NVD · CVE.org
CVE-2026-46120	coverage & exploitation status	NVD · CVE.org
CVE-2026-53329	coverage & exploitation status	NVD · CVE.org
CVE-2026-63884	coverage & exploitation status	NVD · CVE.org
CVE-2026-64048	coverage & exploitation status	NVD · CVE.org
CVE-2026-53189	coverage & exploitation status	NVD · CVE.org
CVE-2026-53059	coverage & exploitation status	NVD · CVE.org
CVE-2026-63887	coverage & exploitation status	NVD · CVE.org
CVE-2025-54518	coverage & exploitation status	NVD · CVE.org
CVE-2026-43206	coverage & exploitation status	NVD · CVE.org
CVE-2026-64219	coverage & exploitation status	NVD · CVE.org
CVE-2026-53136	coverage & exploitation status	NVD · CVE.org
CVE-2026-53016	coverage & exploitation status	NVD · CVE.org
CVE-2026-17523	coverage & exploitation status	NVD · CVE.org
CVE-2026-31411	coverage & exploitation status	NVD · CVE.org
CVE-2026-43112	coverage & exploitation status	NVD · CVE.org
CVE-2026-23110	coverage & exploitation status	NVD · CVE.org
CVE-2026-52991	coverage & exploitation status	NVD · CVE.org
CVE-2026-64379	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
medium[NEW] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
medium[NEW] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attackcert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
low[UPDATE] [low] Linux Kernel: Vulnerability allows denial of servicecert-bund
high[UPDATE] [high] Linux Kernel: Multiple Vulnerabilitiescert-bund
unknownUSN-8669-1: Linux kernel (NVIDIA) vulnerabilitiesubuntu
unknownUSN-8668-1: Linux kernel (GCP) vulnerabilitiesubuntu
unknownMultiple vulnerabilities in SUSE Linux kernel (August 21, 2026)cert-fr-avis
unknownMultiple vulnerabilities in Debian LTS Linux kernel (August 21, 2026)cert-fr-avis
unknownUSN-8665-1: Linux kernel (Raspberry Pi) vulnerabilitiesubuntu

Recent advisories for Red Hat Linux

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

high[NEW] [high] Red Hat Enterprise Linux (Apicurio Registry): Multiple Vulnerabilitiescert-bund · 2026-08-25
high[NEW] [high] Red Hat Enterprise Linux (mrtg, kbd, urwid): Multiple vulnerabilitiescert-bund · 2026-08-25
medium[NEW] [medium] Red Hat Enterprise Linux (pyasn1): Vulnerability enables Denial of Servicecert-bund · 2026-08-25
high[UPDATE] [high] Fast Datapath for Red Hat Enterprise Linux (ovn): Multiple Vulnerabilitiescert-bund · 2026-08-25
medium[NEW] [medium] Red Hat Enterprise Linux (yelp, dracut): Multiple vulnerabilitiescert-bund · 2026-08-25
high[NEW] [high] Red Hat Enterprise Linux (nodejs:24): Multiple vulnerabilitiescert-bund · 2026-08-25