RedHat Linux Kernel Multiple Vulnerabilities

CSIRTS triage

What

Multiple vulnerabilities exist in the Linux kernel.

Who is affected

All deployments of the Linux kernel are affected.

Urgency

Remediation is urgent due to active exploitation.

Action

Apply the latest kernel patches.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

HKCERT Security Bulletins (HK · national-cert · site)

Severity

unknown

Published

2026-07-02

Exploitation

Not in CISA KEV at last sync

Original advisory: https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260702

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2025-102630.53% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all scored CVEs.
• Low exploitation riskCVE-2025-711160.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all scored CVEs.
• Low exploitation riskCVE-2026-48780.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
• Low exploitation riskCVE-2026-229840.35% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 27% of all scored CVEs.
• Low exploitation riskCVE-2026-229900.34% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 26% of all scored CVEs.
• Low exploitation riskCVE-2026-232160.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all scored CVEs.
• Low exploitation riskCVE-2026-234550.51% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 40% of all scored CVEs.
• Exploitation likely imminentCVE-2026-31431EPSS puts this in the most-targeted tier (96.3% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 100% of all scored CVEs.
• Low exploitation riskCVE-2026-316690.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 32% of all scored CVEs.
• Low exploitation riskCVE-2026-353850.42% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 34% of all scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
• high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
• medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
• high[UPDATE] [high] Linux Kernel (Dirty Frag): Multiple vulnerabilities allow gaining administrator rightscert-bund
• medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
• medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
• medium[UPDATE] [medium] Linux Kernel: Vulnerability Allows Bypassing Security Measurescert-bund
• high[UPDATE] [high] Linux Kernel (Fragnesia): Vulnerability Allows Gaining Administrator Rightscert-bund
• high[UPDATE] [high] Linux Kernel: Vulnerability allows gaining administrator rightscert-bund
• high[UPDATE] [high] Linux Kernel: Multiple vulnerabilities enable denial of servicecert-bund
• high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
• medium[UPDATE] [medium] Linux Kernel: Vulnerability allows privilege escalationcert-bund

More from HKCERT Security Bulletins

• unknownGoogle Chrome Multiple Vulnerabilities2026-07-09
• unknownJuniper Junos OS Multiple Vulnerabilities2026-07-09
• unknownPalo Alto Products Multiple Vulnerabilities2026-07-09
• unknownBeyondTrust Products Multiple Vulnerabilities2026-07-08
• unknownApple Products Multiple Vulnerabilities2026-07-06