# CERT-FR Lists Debian LTS Kernel Flaws

Published: 2026-10-23 · Severity: routine
Canonical: https://vorant.io/reports/4bf25e50-8647-516d-8cd7-47e8f74a4ff2/cert-fr-lists-debian-lts-kernel-flaws

> CERT-FR advisory covers numerous Linux kernel vulnerabilities in Debian 12 LTS allowing privilege escalation, data exposure, or denial of service; patches available.

CERT-FR published an advisory consolidating multiple vulnerabilities discovered in the Linux kernel as shipped with Debian 12 (bookworm) LTS. The affected versions are those prior to 6.1.190-1 and 6.12.113-1~deb12u1. The vulnerabilities, drawn from upstream kernel fixes backported by the Debian LTS team, collectively enable privilege escalation, disclosure of sensitive data, and denial-of-service conditions across various kernel subsystems (networking, filesystems, drivers, memory management, etc., based on typical kernel CVE batches of this type).

No evidence of active exploitation is mentioned in the advisory; this is a routine Debian LTS security update bundling fixes accumulated from upstream kernel stable trees. The advisory references two Debian LTS security announcements (msg00035 and msg00044, October 2026) and enumerates an extremely large number of CVE identifiers — far exceeding typical kernel update batches — indicating a significant backlog of kernel fixes being applied in this cycle.

Defenders running Debian 12 bookworm with LTS support should prioritize updating to the fixed kernel versions referenced in the Debian LTS bulletins. Given the scale of the CVE list, organizations should treat this as a standard but important kernel patching cycle rather than an emergency, applying updates through normal maintenance windows unless specific CVEs in the list are independently confirmed as exploited.

## Mentioned in this report

- Vulnerabilities: CVE-2023-52629, CVE-2023-52676, CVE-2023-53231, CVE-2023-53336, CVE-2023-53353, CVE-2023-53429, CVE-2023-53491, CVE-2023-53538, CVE-2023-53574, CVE-2023-53627, CVE-2023-53762, CVE-2023-53851, CVE-2023-53857, CVE-2023-53999, CVE-2023-54227, CVE-2023-54233, CVE-2024-35887, CVE-2024-49568, CVE-2024-50017, CVE-2024-50029, CVE-2024-58097, CVE-2025-21649, CVE-2025-21651, CVE-2025-21759, CVE-2025-22039, CVE-2025-22103, CVE-2025-23129, CVE-2025-37833, CVE-2025-38204, CVE-2025-40074, CVE-2025-40097, CVE-2025-40158, CVE-2025-68190, CVE-2025-68736, CVE-2026-100070, CVE-2026-100071, CVE-2026-100075, CVE-2026-100078, CVE-2026-23191, CVE-2026-23447

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1375

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/4bf25e50-8647-516d-8cd7-47e8f74a4ff2/cert-fr-lists-debian-lts-kernel-flaws.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup