Multiples vulnérabilités dans le noyau Linux d'Ubuntu (04 septembre 2026)
De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
CSIRTS triage
- What
- Multiple vulnerabilities in Ubuntu Linux Kernel allow attackers to cause unspecified security issues.
- Who is affected
- Ubuntu systems running affected kernel versions.
- Urgency
- Unknown priority; impact is unspecified and requires vendor clarification.
- Action
- Monitor Ubuntu security advisories and apply kernel updates when impact details are published for CVE-2026-43198, CVE-2026-52955, CVE-2025-27558, CVE-2026-53002, CVE-2026-52958, CVE-2026-64531, CVE-2026-52999, and CVE-2026-31405.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Linux Kernel
Get an email when a new Linux Kernel advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1117/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-431980.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-529550.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 31% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2025-275580.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-530020.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 30% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-529580.54% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-645310.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 31% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-529990.58% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 46% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-314050.55% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-314480.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-529890.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all EPSS-scored CVEs.
Referenced CVEs
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownUSN-8748-1: Linux kernel (NVIDIA) vulnerabilitiesubuntu
- mediumexploited[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellencert-bund
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellencert-bund
- high[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellencert-bund
- high[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellencert-bund
- high[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellencert-bund
- low[UPDATE] [niedrig] Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Servicecert-bund
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellencert-bund
- high[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellencert-bund
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellencert-bund
- highexploited[UPDATE] [hoch] IBM QRadar SIEM: Mehrere Schwachstellencert-bund
- unknownMultiples vulnérabilités dans Google Android (10 septembre 2026)cert-fr-avis
More from CERT-FR Avis de sécurité
- unknownMultiples vulnérabilités dans MongoDB Server (10 septembre 2026)2026-09-10
- unknownMultiples vulnérabilités dans les produits Palo Alto Networks (10 septembre 2026)2026-09-10
- unknownVulnérabilité dans Apereo CAS (10 septembre 2026)2026-09-10
- unknownMultiples vulnérabilités dans HPE Aruba Networking ClearPass Policy Manager (10 septembre 2026)2026-09-10
- unknownMultiples vulnérabilités dans Moodle (10 septembre 2026)2026-09-10