Linux Kernel Vulnerability Allows Physical Access Attacks

CERT-Bund published a new security advisory regarding a vulnerability in the Linux kernel that allows attackers with physical access to cause denial of service conditions, execute arbitrary code, or disclose sensitive information. The vulnerability affects multiple unsupported kernel versions across major release branches. No remote attack vector exists. The CVSS Base Score of 6.8 indicates medium severity, and mitigations are available.

Organizations running Linux systems should immediately inventory affected kernel versions and apply patches. Physical access controls are especially critical for preventing exploitation of this vulnerability. System administrators and security teams should prioritize patching Linux servers, embedded systems, and any endpoints where untrusted individuals may gain physical access.