# Multiple Linux kernel vulnerabilities in Debian

Published: 2026-08-14 · Severity: routine
Canonical: https://vorant.io/reports/9d184243-82df-5af5-ac4d-0f4b09ae586e/multiple-linux-kernel-vulnerabilities-in-debian

> Multiple kernel flaws in Debian 13 enable privilege escalation, data disclosure, and denial of service.

CERT-FR has published a security advisory covering multiple vulnerabilities in the Linux kernel shipped with Debian 13 (trixie). The affected systems are Debian 13 versions prior to kernel 6.12.101-1. These flaws collectively permit attackers to achieve privilege escalation, compromise data confidentiality, and cause service disruption. The advisory cites 27 distinct CVEs ranging from CVE-2025-40098 to CVE-2026-64584. Debian administrators should apply the patched kernel version 6.12.101-1 or later without delay. The advisory references the official Debian security bulletin for comprehensive patch details and remediation guidance.

## Mentioned in this report

- Vulnerabilities: CVE-2025-40098, CVE-2026-45897, CVE-2026-45901, CVE-2026-53078, CVE-2026-53090, CVE-2026-64205, CVE-2026-64280, CVE-2026-64290, CVE-2026-64561, CVE-2026-64562, CVE-2026-64563, CVE-2026-64564, CVE-2026-64565, CVE-2026-64567, CVE-2026-64568, CVE-2026-64569, CVE-2026-64570, CVE-2026-64571, CVE-2026-64572, CVE-2026-64573, CVE-2026-64574, CVE-2026-64576, CVE-2026-64577, CVE-2026-64578, CVE-2026-64579, CVE-2026-64580, CVE-2026-64583, CVE-2026-64584

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1030

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/9d184243-82df-5af5-ac4d-0f4b09ae586e/multiple-linux-kernel-vulnerabilities-in-debian.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup