[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2026-43476 CVE-2026-43477 CVE-2026-43478 CVE-2026-43479 CVE-2026-43480 CVE-2026-43481

An attacker can exploit multiple vulnerabilities in Linux Kernel to conduct a denial of service attack or achieve other unspecified impacts.

CSIRTS triage

vendor: Linux product: Kernel Denial of serviceOther

What: Multiple vulnerabilities can lead to denial of service or other unspecified impacts.
Who is affected: Deployments of the Linux Kernel.
Urgency: Remediation is urgent due to the high severity of the vulnerabilities.
Action: Apply patches as soon as they are available.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Kernel

Get an email when a new Kernel advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-08-27
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1531

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-434760.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-434770.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-434780.10% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-434790.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-434800.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-434810.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-434820.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-434830.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-434840.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-434850.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-43476	coverage & exploitation status	NVD · CVE.org
CVE-2026-43477	coverage & exploitation status	NVD · CVE.org
CVE-2026-43478	coverage & exploitation status	NVD · CVE.org
CVE-2026-43479	coverage & exploitation status	NVD · CVE.org
CVE-2026-43480	coverage & exploitation status	NVD · CVE.org
CVE-2026-43481	coverage & exploitation status	NVD · CVE.org
CVE-2026-43482	coverage & exploitation status	NVD · CVE.org
CVE-2026-43483	coverage & exploitation status	NVD · CVE.org
CVE-2026-43484	coverage & exploitation status	NVD · CVE.org
CVE-2026-43485	coverage & exploitation status	NVD · CVE.org
CVE-2026-43486	coverage & exploitation status	NVD · CVE.org
CVE-2026-43487	coverage & exploitation status	NVD · CVE.org
CVE-2026-43488	coverage & exploitation status	NVD · CVE.org
CVE-2026-43489	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

unknownUSN-8668-1: Linux kernel (GCP) vulnerabilitiesubuntu
unknownMultiple vulnerabilities in SUSE Linux kernel (August 21, 2026)cert-fr-avis
unknownUSN-8665-1: Linux kernel (Raspberry Pi) vulnerabilitiesubuntu
unknownUSN-8620-4: Linux kernel (Intel IoTG) vulnerabilitiesubuntu
unknownUSN-8620-3: Linux kernel (Intel IoTG) vulnerabilitiesubuntu
unknownUSN-8620-2: Linux kernel (Azure FIPS) vulnerabilitiesubuntu
highUSN-8620-1: Linux kernel vulnerabilitiesubuntu
highUSN-8619-1: Linux kernel (HWE) vulnerabilitiesubuntu
highUSN-8595-3: Linux kernel (AWS) vulnerabilitiesubuntu
highUSN-8574-3: Linux kernel vulnerabilitiesubuntu
highUSN-8610-1: Linux kernel (Azure CVM) vulnerabilitiesubuntu
highUSN-8575-3: Linux kernel vulnerabilitiesubuntu

Recent advisories for Linux Kernel

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownCVE-2026-80886: In the Linux kernel, the following vulnerability has been resolved: serial: msm: Disable DMA f…nvd · 2026-09-04
unknownCVE-2026-80885: In the Linux kernel, the following vulnerability has been resolved: afs: Fix uncancelled rxrpc…nvd · 2026-09-04
unknownCVE-2026-80884: In the Linux kernel, the following vulnerability has been resolved: ntb: Store original DMA ad…nvd · 2026-09-04
unknownCVE-2026-80883: In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Init…nvd · 2026-09-04
unknownCVE-2026-80882: In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENO…nvd · 2026-09-04
unknownCVE-2026-80881: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix buffer head man…nvd · 2026-09-04