Debian LTS patches mass Linux kernel flaw batch
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
CERT-FR advises patching Debian 12 LTS Linux kernel against a large batch of vulnerabilities enabling privilege escalation, data exposure, or denial of service.
CERT-FR has issued an advisory covering a very large number of vulnerabilities affecting the Linux kernel as shipped in Debian 12 (bookworm) LTS, impacting versions prior to 6.1.190-1 and 6.12.113-1~deb12u1. The flaws stem from upstream kernel fixes backported by the Debian LTS team and span a wide range of kernel subsystems; collectively they can allow a local or adjacent attacker to escalate privileges, disclose sensitive kernel memory/data, or crash the system (denial of service). No single flaw is highlighted as uniquely critical or under active exploitation in this bulletin; rather, this is a rollup of kernel hardening fixes accumulated across multiple upstream stable releases (2023-2026 CVE ranges), consistent with routine LTS kernel catch-up maintenance.
Defenders running Debian 12 LTS should prioritize updating to the fixed kernel package versions referenced in the two linked Debian LTS security announcements (msg00035 and msg00044, October 2026). Given the volume and generic nature of the issues (mostly local privilege escalation, info leak, and DoS primitives typical of kernel bug classes such as use-after-free, race conditions, and out-of-bounds access), standard patch management should apply with normal priority unless specific exploitation is separately confirmed. No IOCs, threat actors, or active campaigns are associated with this advisory; it is a vendor patch bulletin, not an attack report.
Mentioned in this report
Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1375
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 14,237 reports from 143 sources, 591 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them — about forty a week that are yours, not the four hundred that are not.
Create a free account What it costs