# Debian Patches Dozens of Linux Kernel Flaws

Published: 2026-10-23 · Severity: routine
Canonical: https://vorant.io/reports/bc3c0f2e-26a8-5163-8aca-5d5f0a872d96/debian-patches-dozens-of-linux-kernel-flaws

> CERT-FR advisory lists numerous Linux kernel vulnerabilities in Debian 13 (trixie) fixed in kernel version 6.12.113-1, enabling privilege escalation, DoS, or data exposure.

CERT-FR published an advisory (CERTFR-2026-AVI-1374) describing multiple vulnerabilities in the Linux kernel as shipped with Debian 13 (trixie) prior to version 6.12.113-1. The advisory references the Debian security announcement DSA msg00482 (16 October 2026) and enumerates over 200 CVE identifiers, most issued in 2026, affecting various kernel subsystems. No single root cause or exploit chain is described; each CVE represents a distinct kernel-level issue.

The cumulative risks identified by CERT-FR are privilege escalation, denial of service, and loss of data confidentiality. These are typical consequences of kernel memory-safety bugs (use-after-free, out-of-bounds read/write, race conditions) commonly fixed in large kernel security batches. The advisory does not indicate active exploitation in the wild; it is a routine vendor patch notification rather than a report of an ongoing campaign.

Defenders running Debian 13 should update affected systems to kernel package version 6.12.113-1 or later as soon as possible via standard Debian package management, referencing the official Debian Security Announce bulletin for patch details and the Debian security tracker for per-CVE technical specifics. Given the large number of CVEs and the presence of local privilege-escalation and DoS primitives, this should be treated as a priority patching cycle for all Debian-based Linux hosts, with particular attention to multi-tenant or shared systems where local privilege escalation is most impactful.

## Mentioned in this report

- Vulnerabilities: CVE-2025-38204, CVE-2025-40158, CVE-2026-52988, CVE-2026-72315, CVE-2026-72463, CVE-2026-74347, CVE-2026-80935, CVE-2026-80937, CVE-2026-80939, CVE-2026-80980, CVE-2026-81016, CVE-2026-89437, CVE-2026-89441, CVE-2026-89445, CVE-2026-89452, CVE-2026-89467, CVE-2026-89500, CVE-2026-89503, CVE-2026-89520, CVE-2026-89527, CVE-2026-89633, CVE-2026-89638, CVE-2026-89766, CVE-2026-89795, CVE-2026-89797, CVE-2026-89806, CVE-2026-89827, CVE-2026-89832, CVE-2026-89837, CVE-2026-89838, CVE-2026-89840, CVE-2026-89859, CVE-2026-89868, CVE-2026-89912, CVE-2026-89921, CVE-2026-89956, CVE-2026-89971, CVE-2026-89972, CVE-2026-89996, CVE-2026-90002

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1374

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/bc3c0f2e-26a8-5163-8aca-5d5f0a872d96/debian-patches-dozens-of-linux-kernel-flaws.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup