Linux Kernel Core — Security Intelligence & Vulnerability Profile

Doctrinal Security Principle

The absence of known CVEs does not guarantee absolute security of a software component. This dossier catalogs verified vulnerabilities, CISA KEV entries, and vendor advisories vetted by Hermes Codex.

---

1. Software Identity & Security Posture

Parameter	Technical Specification
Official Name	Linux Kernel Core
Vendor / Project	linux
Canonical ID	linux:linux_kernel
Versioning Scheme	generic
CPE Identifiers	cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Overall Posture	CRITICAL
Recommended Safe Release	6.18.25

Documented CVEs

101 vulnerabilities cataloged in the Hermes intelligence repository.

CISA KEV Entries

3 flaws with confirmed active in-the-wild exploitation.

Weaponized Exploits

27 vulnerabilities with publicly available PoCs or weaponized exploit tooling.

Remediation Target

Recommended upgrade to 6.18.25 to neutralize known flaws.

---

2. 30-Day Risk Trajectory & Trend Evolution

Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:

Current HTS Score

0 / 100

= Stable over 30d

Max EPSS (Exploitation)

99.9 %

▲ +97.9 % over 30d

CISA KEV Activity

1

Active in-the-wild exploitation

HTS Trend Curve (D-30 → Today)2026-08-12 → 2026-09-10

---

3. Vulnerability History & Version Applicability Matrix

CVE	CVSS Score	EPSS Probability	CISA KEV	Affected Versions	Fixed In	Hermes Analysis
CVE-2026-64268	8.8 (HIGH)	0.3%	No	< v6.18.25	6.18.25	Analysis →
CVE-2026-52924	8.8 (HIGH)	0.3%	No	< v6.18.25	6.18.25	Analysis →
CVE-2026-53266	8.8 (HIGH)	0.3%	CISA KEV	vAll supported production branches to vSUSE Linux Enterprise Server 15	-	Analysis →
CVE-2026-31633	8.1 (HIGH)	0.5%	No	< v6.18.23	6.18.23	Analysis →
CVE-2026-31718	8.1 (HIGH)	0.4%	No	< v6.18.23	6.18.23	Analysis →
CVE-2026-43114	8.1 (HIGH)	0.3%	No	< v6.18.25	6.18.25	Analysis →
CVE-2026-43133	7.9 (HIGH)	0.3%	No	< v6.18.25	6.18.25	Analysis →
CVE-2026-23269	7.8 (HIGH)	0.1%	No	< v6.18.20	6.18.20	Analysis →
CVE-2026-23288	7.8 (HIGH)	0.1%	No	< v6.18.20	6.18.20	Analysis →
CVE-2026-23432	7.8 (HIGH)	0.1%	No	< v6.18.20	6.18.20	Analysis →
CVE-2026-31431	7.8 (HIGH)	99.9%	CISA KEV	< v6.10.8	6.10.8	Analysis →
CVE-2026-74512	7.8 (HIGH)	0.1%	No	< v6.18.23	6.18.23	Analysis →
CVE-2026-72098	7.8 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-74480	7.8 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-68200	7.8 (HIGH)	0.3%	No	< v6.18.25	6.18.25	Analysis →
CVE-2026-68143	7.8 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-68264	7.8 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53361	7.8 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-52933	7.8 (HIGH)	0.3%	No	< v6.18.25	6.18.25	Analysis →
CVE-2026-64530	7.8 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2025-39682	7.8 (HIGH)	2.0%	CISA KEV	v6.0 to v6.1.148, v6.2 to v6.6.102, v6.7 to v6.12.43, v6.13 to v6.16.3, v6.17-rc1 to v6.17-rc2	6.1.149, 6.6.103, 6.12.44, 6.16.4, 6.17	Analysis →
CVE-2026-63869	7.6 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-23246	7.5 (HIGH)	0.3%	No	< v6.18.20	6.18.20	Analysis →
CVE-2026-74521	7.5 (HIGH)	0.4%	No	< v6.18.23	6.18.23	Analysis →
CVE-2026-53071	7.5 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-23172	7.4 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-68294	7.3 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-68426	7.3 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64175	7.3 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64176	7.3 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-43248	7.3 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-31566	7.3 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-74556	7.2 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-46150	7.1 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-46056	7.1 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-31479	7.1 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2024-58007	7.1 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-72045	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-72102	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-72298	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-68363	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-68128	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64304	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64387	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64414	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64438	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64456	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-63802	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-63886	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-63887	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-63888	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-63889	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-63917	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-63919	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-63921	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-63923	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64002	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64015	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64029	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64111	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-64117	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53131	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53182	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53192	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53193	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53223	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53228	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53239	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53246	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53268	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53275	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-52920	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-52947	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-52971	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53000	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53006	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53016	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53075	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-46306	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-46266	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-46149	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-45998	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-46054	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-43339	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-43370	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-43233	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-31539	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-31656	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-31663	7 (HIGH)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-53196	6.8 (MEDIUM)	0.3%	No	< v6.18.25	6.18.25	-
CVE-2026-31430	6.5 (MEDIUM)	0.1%	No	< v6.18.22	6.18.22	Analysis →
CVE-2026-43386	6.5 (MEDIUM)	0.1%	No	< v6.18.24	6.18.24	Analysis →
CVE-2026-53176	6.5 (MEDIUM)	0.2%	No	< v6.18.25	6.18.25	-
CVE-2025-71127	6.3 (MEDIUM)	0.2%	No	< v6.18.25	6.18.25	-
CVE-2026-43368	5.5 (MEDIUM)	0.2%	No	< v6.18.25	6.18.25	-
CVE-2026-23466	5.5 (MEDIUM)	0.2%	No	< v6.18.25	6.18.25	-
CVE-2025-40026	5.5 (MEDIUM)	0.2%	No	< v6.18.25	6.18.25	-
CVE-2025-40149	5 (MEDIUM)	0.2%	No	< v6.18.25	6.18.25	-
CVE-2026-23103	4.7 (MEDIUM)	0.2%	No	< v6.18.25	6.18.25	-
CVE-2025-68745	4.7 (MEDIUM)	0.2%	No	< v6.18.25	6.18.25	-
CVE-2024-53161	3.8 (LOW)	0.2%	No	< v6.18.25	6.18.25	-

---

4. Ransomware & Threat Actor Exposure

Vulnerabilities impacting Linux Kernel Core are actively leveraged in real-world intrusion campaigns:

• CVE-2026-53266: Known in multi-tenant container exploitation (Read deep dive analysis)
• CVE-2026-31431: Known in opportunistic exploitation (Read deep dive analysis)
• CVE-2025-39682: Observed in active credential harvesting and privilege escalation campaigns (Read deep dive analysis)

---

5. Evaluate Running Versions in Interactive Workbench

Are you operating Linux Kernel Core in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas:

Launch Software Intelligence Workbench for Linux Kernel Core Run deterministic in-browser evaluation, calculate HTS threat reduction, and plan your upgrade path.