# Debian LTS patches mass Linux kernel flaw batch

Published: 2026-10-23 · Severity: routine
Canonical: https://vorant.io/reports/35b56575-fb74-5060-aaf2-ff691ec96ef0/debian-lts-patches-mass-linux-kernel-flaw-batch

> CERT-FR advises patching Debian 12 LTS Linux kernel against a large batch of vulnerabilities enabling privilege escalation, data exposure, or denial of service.

CERT-FR has issued an advisory covering a very large number of vulnerabilities affecting the Linux kernel as shipped in Debian 12 (bookworm) LTS, impacting versions prior to 6.1.190-1 and 6.12.113-1~deb12u1. The flaws stem from upstream kernel fixes backported by the Debian LTS team and span a wide range of kernel subsystems; collectively they can allow a local or adjacent attacker to escalate privileges, disclose sensitive kernel memory/data, or crash the system (denial of service). No single flaw is highlighted as uniquely critical or under active exploitation in this bulletin; rather, this is a rollup of kernel hardening fixes accumulated across multiple upstream stable releases (2023-2026 CVE ranges), consistent with routine LTS kernel catch-up maintenance.

Defenders running Debian 12 LTS should prioritize updating to the fixed kernel package versions referenced in the two linked Debian LTS security announcements (msg00035 and msg00044, October 2026). Given the volume and generic nature of the issues (mostly local privilege escalation, info leak, and DoS primitives typical of kernel bug classes such as use-after-free, race conditions, and out-of-bounds access), standard patch management should apply with normal priority unless specific exploitation is separately confirmed. No IOCs, threat actors, or active campaigns are associated with this advisory; it is a vendor patch bulletin, not an attack report.

## Mentioned in this report

- Vulnerabilities: CVE-2023-52629, CVE-2023-52676, CVE-2023-53231, CVE-2023-53336, CVE-2023-53353, CVE-2023-53429, CVE-2023-53491, CVE-2023-53538, CVE-2023-53574, CVE-2023-53627, CVE-2023-53762, CVE-2023-53851, CVE-2023-53857, CVE-2023-53999, CVE-2023-54227, CVE-2023-54233, CVE-2024-35887, CVE-2024-49568, CVE-2024-50017, CVE-2024-50029, CVE-2024-58097, CVE-2025-21649, CVE-2025-21651, CVE-2025-21759, CVE-2025-22039, CVE-2025-22103, CVE-2025-23129, CVE-2025-37833, CVE-2025-38204, CVE-2025-40074, CVE-2025-40097, CVE-2025-40158, CVE-2025-68190, CVE-2025-68736, CVE-2026-100070, CVE-2026-100071, CVE-2026-100075, CVE-2026-100078, CVE-2026-23191, CVE-2026-23447

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1375

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/35b56575-fb74-5060-aaf2-ff691ec96ef0/debian-lts-patches-mass-linux-kernel-flaw-batch.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup