[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen

mediumCVE-2026-64537 CVE-2026-64538 CVE-2026-64539 CVE-2026-64540 CVE-2026-64541 CVE-2026-64542

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um den Speicher zu beschädigen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.

CSIRTS triage

vendor: Linux product: Kernel Memory corruption Information disclosure Denial of serviceOther

What: Multiple vulnerabilities in the Linux Kernel can be exploited to corrupt memory, disclose confidential information, manipulate data, or cause a Denial-of-Service condition.
Who is affected: Deployments of the Linux Kernel are affected by these vulnerabilities.
Urgency: Remediation is medium urgency as the vulnerabilities are serious but not confirmed to be actively exploited.
Action: Update to the latest version of the Linux Kernel to mitigate these vulnerabilities.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Kernel

Get an email when a new Kernel advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: medium
Published: 2026-09-09
Exploitation: Not in CISA KEV at last sync

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2536

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-645370.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-645380.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-645390.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-645400.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-645410.52% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 42% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-645420.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-645430.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-645440.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-645450.50% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-645460.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-64537	coverage & exploitation status	NVD · CVE.org
CVE-2026-64538	coverage & exploitation status	NVD · CVE.org
CVE-2026-64539	coverage & exploitation status	NVD · CVE.org
CVE-2026-64540	coverage & exploitation status	NVD · CVE.org
CVE-2026-64541	coverage & exploitation status	NVD · CVE.org
CVE-2026-64542	coverage & exploitation status	NVD · CVE.org
CVE-2026-64543	coverage & exploitation status	NVD · CVE.org
CVE-2026-64544	coverage & exploitation status	NVD · CVE.org
CVE-2026-64545	coverage & exploitation status	NVD · CVE.org
CVE-2026-64546	coverage & exploitation status	NVD · CVE.org
CVE-2026-64547	coverage & exploitation status	NVD · CVE.org
CVE-2026-64548	coverage & exploitation status	NVD · CVE.org
CVE-2026-64549	coverage & exploitation status	NVD · CVE.org
CVE-2026-64550	coverage & exploitation status	NVD · CVE.org
CVE-2026-64551	coverage & exploitation status	NVD · CVE.org
CVE-2026-64552	coverage & exploitation status	NVD · CVE.org
CVE-2026-64553	coverage & exploitation status	NVD · CVE.org
CVE-2026-64554	coverage & exploitation status	NVD · CVE.org
CVE-2026-64555	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for Linux Kernel

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownCVE-2026-80925: In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic …nvd · 2026-09-09
highCVE-2026-80924: In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_s…nvd · 2026-09-09
unknownCVE-2026-80923: In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregist…nvd · 2026-09-09
unknownCVE-2026-80922: In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow z…nvd · 2026-09-09
highCVE-2026-80921: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stal…nvd · 2026-09-09
unknownCVE-2026-80920: In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd si…nvd · 2026-09-09