Bundesamt für Sicherheit in der Informationstechnik Amazon · Linux Kernel: Mehrere Schwachstellen
Affects Bundesamt für Sicherheit in der Informationstechnik AmazonSource GCVE Database
Mentioned vulnerabilities
Not known to be exploited.
Data as of 12 Nov 2026, 11:23 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
- EPSS
- 1.3% chance of exploitation in 30 days – higher than 72% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 5 Jul 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
Public exploit code: GitHub proofs of concept
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), GitHub proofs of concept, the Metasploit, Exploit-DB and nuclei-templates index as of 12 Nov 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Bundesamt für Sicherheit in der Informationstechnik Amazon | Affected
| Fixed in– |
AI-suggested
Google has applied mitigations at the hypervisor level for affected Compute Engine machine series. Users should update their guest operating systems when vendor fixes become available to protect against attacks within VMs. For bare metal and nested virtualization, apply vendor patches as released. Google updates CPU information reported to VMs to enable mitigations, requiring VM stop/start cycles (rebooting the guest OS alone is insufficient). No action is required for Cloud Run. Follow vendor advisories AMD-SB-7073 and AMD-SB-3055 for detailed patching instructions.
Description
This entry references multiple vulnerabilities related to the Linux kernel and AMD EPYC 5th generation processors, specifically transient scheduler attacks (TSAs) that may leak sensitive information via side channels. The vulnerabilities affect certain AMD EPYC processors and potentially allow attackers to infer data across privilege boundaries. Mitigations include updating guest operating systems and applying vendor fixes. No direct exploit in the wild is reported for the Linux kernel vulnerability CVE-2026-53359. The advisory primarily details AMD CPU vulnerabilities and their mitigations rather than specifics about the Linux kernel flaw.
References
- wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2208.json (opens in a new tab)
- wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2208 (opens in a new tab)
- lore.kernel.org/linux-cve-announce/ (opens in a new tab)
- lore.kernel.org/linux-cve-announce/2026070403-CVE-2026-53359-4f57@gregkh/ (opens in a new tab)
- lore.kernel.org/linux-cve-announce/2026070413-CVE-2026-53360-3284@gregkh/ (opens in a new tab)
- lore.kernel.org/linux-cve-announce/2026070436-CVE-2026-53361-f969@gregkh/ (opens in a new tab)
- lore.kernel.org/linux-cve-announce/2026070450-CVE-2026-53362-fe9b@gregkh/ (opens in a new tab)
- security-tracker.debian.org/tracker/DSA-6381-1 (opens in a new tab)
- github.com/HORKimhab/CVE-2026-53359/tree/main/Januscape-V4bel (opens in a new tab)
- docs.cloud.google.com/support/bulletins (opens in a new tab)
- linux.oracle.com/errata/ELSA-2026-50372.html (opens in a new tab)
- bodhi.fedoraproject.org/updates/FEDORA-2026-75653cf1c2 (opens in a new tab)
- bodhi.fedoraproject.org/updates/FEDORA-2026-c3e2e91b4d (opens in a new tab)
- linux.oracle.com/errata/ELSA-2026-50374.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-July/027309.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-July/027327.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-July/027316.html (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:36956 (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-July/027328.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-July/027317.html (opens in a new tab)