Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation
WID-SEC-2026-3871 · first 12.10.2026 · updated 20.10.2026 · CVSS 8,4
What it is about
Der Kernel stellt den Kern des Linux Betriebssystems dar. Ein Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um erweiterte Rechte zu erlangen.
Under what conditions?
The BSI does not name any particular preconditions.
What can happen in the worst case
An attacker could use the vulnerability to
- erweiterte Rechte zu erlangen
Am I affected?
Affected according to the BSI:
- Open Source Linux Kernel <7.2.9
- Open Source Linux Kernel <7.3-rc5
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Open Source Linux Kernel 7.2.9
- Open Source Linux Kernel 7.3-rc5
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- Kernel CVE Announce Mailingliste lore.kernel.org
- Linux Kernel CVE Announcement CVE-2026-98385 lore.kernel.org
- PoC CVE-2026-98385 github.com
CVE: CVE-2026-98385
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.