Dated advisories from distribution maintainers explain particular Linux kernel vulnerabilities and available updates. A separate Dnsmasq announcement concerns networking software, which should not be confused with the kernel itself.
Recent Linux Kernel Security Advisories
Gentoo’s May 2026 notice describes the Copy Fail, Dirty Frag and Fragnesia privilege-escalation vulnerabilities. It explains that its kernel teams were packaging upstream releases and backporting fixes or mitigations. A Debian security announcement reproduced by LWN is a separate September 2026 kernel update. These notices describe specific incidents and releases; neither is a current inventory of every Linux vulnerability.
Networking Software Vulnerabilities
Beyond the core kernel, infrastructure software often requires security oversight. In May 2026, CERT announced six CVEs concerning serious security vulnerabilities in Dnsmasq. These were described as long-standing bugs impacting a wide range of non-ancient versions of the software. Administrators managing systems that rely on Dnsmasq for DNS and DHCP services were advised to review these findings.
Managing Security Updates
Gentoo’s notice names sys-kernel/gentoo-kernel, sys-kernel/gentoo-kernel-bin and sys-kernel/gentoo-sources as its security-supported packages. Its statement that vanilla packages were vulnerable was made at the time of that notice and should not be treated as a timeless assessment of every current kernel. Administrators should use the advisory and support information for their distribution, package and release when checking update status.
Sources and further reading
Debian alert DSA-6528-1 (kernel) [LWN.net]
https://lwn.net/Articles/1097401/
Copy Fail, Dirty Frag, and Fragnesia kernel vulnerabilities – Gentoo Linux
https://www.gentoo.org/news/2026/05/19/copy-fail-fragnesia-vulnerabilities.html
[Dnsmasq-discuss] Security - IMPORTANT
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html