[NEW] [medium] Linux Kernel: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in the Linux Kernel to conduct unspecified attacks, which may include DoS attacks, information disclosure, memory corruption, or bypassing security measures.
CSIRTS triage
- What
- Multiple vulnerabilities in the Linux Kernel may allow unspecified attacks, including denial of service and information disclosure.
- Who is affected
- Users of the Linux Kernel.
- Urgency
- Remediation is medium due to the potential for various attacks, though specific exploits are not detailed.
- Action
- Update the Linux Kernel to the latest version.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Kernel
Get an email when a new Kernel advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2527
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2024-140400.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all scored CVEs.
- Low exploitation riskCVE-2026-642080.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all scored CVEs.
- Low exploitation riskCVE-2026-642090.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
- Low exploitation riskCVE-2026-642100.34% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 27% of all scored CVEs.
- Low exploitation riskCVE-2026-642110.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
- Low exploitation riskCVE-2026-642120.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all scored CVEs.
- Low exploitation riskCVE-2026-642130.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all scored CVEs.
- Low exploitation riskCVE-2026-642140.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all scored CVEs.
- Low exploitation riskCVE-2026-642150.16% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
- Low exploitation riskCVE-2026-642160.45% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all scored CVEs.
Referenced CVEs
+12 more CVEs referenced in this advisory.
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- highUSN-8620-4: Linux kernel (Intel IoTG) vulnerabilitiesubuntu
- highUSN-8620-3: Linux kernel (Intel IoTG) vulnerabilitiesubuntu
- unknownMultiples vulnérabilités dans le noyau Linux de Debian LTS (31 juillet 2026)cert-fr-avis
- unknownDSA-6405-1 linux - security updatedebian
- highUSN-8620-2: Linux kernel (Azure FIPS) vulnerabilitiesubuntu
- highUSN-8620-1: Linux kernel vulnerabilitiesubuntu
- highUSN-8618-1: Linux kernel vulnerabilitiesubuntu
- highCVE-2024-14040: In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase wei…nvd
- criticalCVE-2026-64269: In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-…nvd
- criticalCVE-2026-64268: In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Respo…nvd
- unknownCVE-2026-64267: In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune n…nvd
- highCVE-2026-64266: In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request befo…nvd
Recent advisories for Linux Kernel
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- highUSN-8620-4: Linux kernel (Intel IoTG) vulnerabilitiesubuntu · 2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of servicecert-bund · 2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow Denial of Servicecert-bund · 2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of servicecert-bund · 2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund · 2026-07-31
- medium[UPDATE] [medium] Linux Kernel (ntfs3): Vulnerability allows information disclosurecert-bund · 2026-07-31
More from CERT-Bund (BSI) Security Advisories
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow Denial of Service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel (ntfs3): Vulnerability allows information disclosure2026-07-31