Linux Kernel Multiple Vulnerabilities Allow DoS, Security Bypass

Summary

CERT-Bund issued advisory WID-SEC-2026-1252 warning of multiple vulnerabilities in the Linux Kernel (Open Source, version dated 22.04.2026) with a CVSS Base Score of 5.9 (medium) and Temporal Score of 5.2 (medium). The vulnerabilities allow remote or local attackers to perform denial of service attacks, bypass security measures, disclose information, cause other unspecified effects, and potentially execute code. Remote attack capability is not available. Mitigation measures are available.

About this source

CERT-Bund is the German federal cybersecurity agency's incident response team, run by the BSI. Their advisory feed publishes vulnerability disclosures and active exploitation warnings for software in widespread enterprise use: VPN appliances, email servers, file transfer products, ERP systems, browsers, hypervisors. Around 280 advisories a month, each with a CVSS score, affected versions, and remediation guidance. The advisories are written in German but cover the same vulnerabilities that show up in CISA, NCSC-UK, and JPCERT bulletins, often hours earlier. Watch this if you patch enterprise software, run a SOC, or write detection rules. GovPing publishes each advisory with the affected vendor, CVSS score, and original CERT-Bund link.

What changed

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Related changes

Linux Kernel Multiple DoS Vulnerabilities CVSS 7.5

Priority review Apr 22, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

DNSdist Multiple DoS Vulnerabilities CVSS 7.5

Priority review Apr 22, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

nginx-ui Multiple Vulnerabilities Allow Security Bypass, CVSS 8.1

Priority review Apr 21, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity