Skip to main content
CVE-2026-53359VulnerabilityPublished Updated

Bundesamt für Sicherheit in der Informationstechnik Amazon · Linux Kernel: Mehrere Schwachstellen

Affects Bundesamt für Sicherheit in der Informationstechnik AmazonSource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited.

Data as of 12 Nov 2026, 11:23 UTC

Severity
High

Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

EPSS
1.3% chance of exploitation in 30 days – higher than 72% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 5 Jul 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: evidence found.

    Public exploit code: GitHub proofs of concept

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), GitHub proofs of concept, the Metasploit, Exploit-DB and nuclei-templates index as of 12 Nov 2026.

What to do

Affected software

ProductAffectedFixed in
Bundesamt für Sicherheit in der Informationstechnik AmazonAffected
  • =F5
Fixed in–

AI-suggested

Google has applied mitigations at the hypervisor level for affected Compute Engine machine series. Users should update their guest operating systems when vendor fixes become available to protect against attacks within VMs. For bare metal and nested virtualization, apply vendor patches as released. Google updates CPU information reported to VMs to enable mitigations, requiring VM stop/start cycles (rebooting the guest OS alone is insufficient). No action is required for Cloud Run. Follow vendor advisories AMD-SB-7073 and AMD-SB-3055 for detailed patching instructions.

Description

This entry references multiple vulnerabilities related to the Linux kernel and AMD EPYC 5th generation processors, specifically transient scheduler attacks (TSAs) that may leak sensitive information via side channels. The vulnerabilities affect certain AMD EPYC processors and potentially allow attackers to infer data across privilege boundaries. Mitigations include updating guest operating systems and applying vendor fixes. No direct exploit in the wild is reported for the Linux kernel vulnerability CVE-2026-53359. The advisory primarily details AMD CPU vulnerabilities and their mitigations rather than specifics about the Linux kernel flaw.

References

Community reviews

Loading reviews…