# Multiple Debian Linux kernel vulnerabilities disclosed

Published: 2026-06-26 · Severity: routine
Canonical: https://vorant.io/reports/16e42ab7-3ef8-5afe-9446-834abbb8370a/multiple-debian-linux-kernel-vulnerabilities-disclosed

> Debian Linux kernel patch addresses multiple vulnerabilities enabling privilege escalation, data confidentiality breach, and denial of service.

CERT-FR has published an advisory covering multiple vulnerabilities discovered in the Debian Linux kernel. The vulnerabilities enable attackers to achieve privilege escalation, compromise data confidentiality, and cause denial of service conditions. The specific CVEs and technical details are referenced in the Debian security bulletin published on June 21, 2026. Affected organizations running Debian systems must apply kernel updates from the vendor to remediate these issues. No active exploitation in the wild is mentioned in the advisory.

## Mentioned in this report

- Vulnerabilities: CVE-2025-22069, CVE-2025-68251, CVE-2025-68768, CVE-2025-71289, CVE-2026-23247, CVE-2026-23272, CVE-2026-23346, CVE-2026-23394, CVE-2026-23469, CVE-2026-31420, CVE-2026-31486, CVE-2026-31560, CVE-2026-31613, CVE-2026-31663, CVE-2026-31717, CVE-2026-43116, CVE-2026-43219, CVE-2026-43245, CVE-2026-43303, CVE-2026-43331, CVE-2026-45838, CVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-45850, CVE-2026-45930, CVE-2026-46117, CVE-2026-46137, CVE-2026-46158, CVE-2026-46160, CVE-2026-46170, CVE-2026-46203, CVE-2026-46216, CVE-2026-46244, CVE-2026-46274

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0809

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/16e42ab7-3ef8-5afe-9446-834abbb8370a/multiple-debian-linux-kernel-vulnerabilities-disclosed.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup