Changeflow GovPing Data Privacy & Cybersecurity Linux Kernel Denial of Service Vulnerability - ...
Priority review Guidance Added Final

Linux Kernel Denial of Service Vulnerability - CVSS 4.0 Medium

Favicon for wid.cert-bund.de CERT-Bund Security Advisories
Published
Detected
Email

Summary

CERT-Bund issued advisory WID-SEC-2026-1037 identifying a medium-severity (CVSS 4.0) denial-of-service vulnerability in multiple Linux Kernel versions. The flaw affects kernel versions prior to 5.10.252, 5.15.202, 6.1.165, 6.6.128, 6.12.75, 6.18.14, 6.19.4, and 7.0-rc1. A local attacker could exploit this vulnerability to cause system unavailability.

View original document View source feed page

What changed

CERT-Bund published security advisory WID-SEC-2026-1037 disclosing a denial-of-service vulnerability in the Linux Kernel with CVSS 4.0 (medium) base score and CVSS 3.6 (low) temporal score. The vulnerability affects multiple open-source Linux Kernel versions up to the specified patch thresholds. A local attacker can exploit this flaw to perform a denial-of-service attack.

Organizations running affected Linux kernel versions should immediately inventory their systems, apply available patches or mitigations, and update vulnerability management processes. Technology companies and government agencies operating Linux infrastructure face heightened risk of service disruption if left unpatched.

What to do next

  1. Identify Linux systems running affected kernel versions
  2. Apply available patches or mitigations immediately
  3. Monitor for further CERT-Bund updates

Archived snapshot

Apr 9, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

[WID-SEC-2026-1037] Linux Kernel: Schwachstelle ermöglicht Denial of Service CVSS Base Score 4.0 (mittel) CVSS Temporal Score 3.6 (niedrig) Remoteangriff nein Datum 08.04.2026 Stand 09.04.2026 Mitigation ja

Betroffene Systeme

Betriebssystem

  • Linux

Produktbeschreibung

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Produkte

08.04.2026
- Open Source Linux Kernel <5.10.252

  • Open Source Linux Kernel <5.15.202

  • Open Source Linux Kernel <6.1.165

  • Open Source Linux Kernel <6.6.128

  • Open Source Linux Kernel <6.12.75

  • Open Source Linux Kernel <6.18.14

  • Open Source Linux Kernel <6.19.4

  • Open Source Linux Kernel <7.0-rc1

Angriff

Angriff

Ein lokaler Angreifer kann eine Schwachstelle in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben

Related changes

Favicon for wid.cert-bund.de IBM Maximo Asset Management DoS Vulnerability - CVSS 5.3
Priority review Apr 08, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de OpenCTI Remote Code Execution Vulnerability - CVSS 9.1 Critical
Urgent Apr 09, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de libTIFF Vulnerability Enables Code Execution and Denial of Service
Priority review Apr 11, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-Bund Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for wid.cert-bund.de
CERT-Bund Security Advisories wid.cert-bund.de/content/public/securityAdvisory/rss
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from BSI.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
BSI
Published
April 8th, 2026
Instrument
Guidance
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
WID-SEC-2026-1037

Who this affects

Applies to
Technology companies Government agencies
Industry sector
5112 Software & Technology
Activity scope
Vulnerability management System patching Security advisories
Geographic scope
Germany DE

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Topics
Information Security Software & Technology

Browse Categories

Agriculture & Food Safety 64 AI Regulation 3 Banking & Finance 291 Consumer Protection 44 Courts & Legal 362 Data Privacy & Cybersecurity 74 Defense & National Security 51 Education 19 Energy 101 Environment 86 Environmental Regulation 8 Financial Regulation 2 Government & Legislation 280 Healthcare 136 Housing 16 Immigration 8 Insurance 58 Labor & Employment 113 Pharma & Drug Safety 104 Public Health 3 Securities & Markets 104 Securities Regulation 9 Tax 66 Telecom & Technology 47 Trade & Sanctions 136 Transportation 57

Get alerts for this source

We'll email you when CERT-Bund Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!