# Debian Linux kernel patch fixes multiple CVEs

Published: 2026-08-21 · Severity: routine
Canonical: https://vorant.io/reports/63acb2b4-71f7-5195-9955-f751520e2c3b/debian-linux-kernel-patch-fixes-multiple-cves

> Debian LTS issued fixes for 300+ Linux kernel vulnerabilities enabling privilege escalation, data theft, and denial of service.

CERT-FR published a security advisory on behalf of Debian LTS documenting over 300 vulnerabilities in the Linux kernel packaged with Debian 12 (bookworm). The vulnerabilities span multiple kernel subsystems and enable three primary attack vectors: privilege escalation allowing unprivileged local attackers to gain root access, confidentiality breaches via information disclosure, and denial of service conditions that can crash the kernel or cause system unavailability. The advisory references kernel package versions prior to 6.12.101-1~deb12u1, which contains the fixes for all identified issues. Organizations running Debian 12 systems must apply the updated kernel package to remediate the risk across their estate.

## Mentioned in this report

- Vulnerabilities: CVE-2025-40098, CVE-2026-45897, CVE-2026-45901, CVE-2026-53078, CVE-2026-53090, CVE-2026-64205, CVE-2026-64280, CVE-2026-64290, CVE-2026-64561, CVE-2026-64562, CVE-2026-64563, CVE-2026-64564, CVE-2026-64565, CVE-2026-64567, CVE-2026-64568, CVE-2026-64569, CVE-2026-64570, CVE-2026-64571, CVE-2026-64572, CVE-2026-64573, CVE-2026-64574, CVE-2026-64576, CVE-2026-64577, CVE-2026-64578, CVE-2026-64579, CVE-2026-64580, CVE-2026-64583, CVE-2026-64584, CVE-2026-68093, CVE-2026-68096, CVE-2026-68097, CVE-2026-68098, CVE-2026-68099, CVE-2026-68100, CVE-2026-68102, CVE-2026-68104, CVE-2026-68106, CVE-2026-68107, CVE-2026-68108, CVE-2026-68110

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1069

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/63acb2b4-71f7-5195-9955-f751520e2c3b/debian-linux-kernel-patch-fixes-multiple-cves.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup