# Multiple vulnerabilities in Debian Linux kernel LTS

Published: 2026-07-31 · Severity: high
Canonical: https://vorant.io/reports/395fc5d9-53d3-5b27-ab9c-edafe2f3650e/multiple-vulnerabilities-in-debian-linux-kernel-lts

> Multiple flaws in Debian 11 kernel allow privilege escalation, data disclosure, and denial of service; patches available.

CERT-FR has disclosed multiple vulnerabilities affecting the Linux kernel in Debian 11 (bullseye) versions prior to 6.1.177-1~deb11u1. The flaws enable local attackers to achieve privilege escalation, breach data confidentiality, and trigger denial-of-service conditions. This is a routine security advisory from Debian's LTS support channel announcing kernel patches. Administrators running Debian 11 should apply the kernel update to version 6.1.177-1~deb11u1 or later. The advisory does not indicate active exploitation in the wild; this is a preventive patch cycle.

## Mentioned in this report

- Vulnerabilities: CVE-2025-23131, CVE-2026-23272, CVE-2026-23278, CVE-2026-23302, CVE-2026-31451, CVE-2026-46252, CVE-2026-52928, CVE-2026-53138, CVE-2026-53139, CVE-2026-53157, CVE-2026-53158, CVE-2026-53163, CVE-2026-53167, CVE-2026-53325, CVE-2026-53327, CVE-2026-53359, CVE-2026-53362 (KEV), CVE-2026-53366, CVE-2026-53381, CVE-2026-53382, CVE-2026-53383, CVE-2026-53384, CVE-2026-53385, CVE-2026-53388, CVE-2026-53390, CVE-2026-53391, CVE-2026-53397, CVE-2026-53398, CVE-2026-53403, CVE-2026-63794, CVE-2026-63795, CVE-2026-63796, CVE-2026-63798, CVE-2026-63800, CVE-2026-63801, CVE-2026-63803, CVE-2026-63807, CVE-2026-63808, CVE-2026-63809, CVE-2026-63814

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0957

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/395fc5d9-53d3-5b27-ab9c-edafe2f3650e/multiple-vulnerabilities-in-debian-linux-kernel-lts.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup