Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks
Debian's DSA-6528-1 updates Trixie's Linux kernel to 6.12.111-1, fixing 1,313 CVE entries covering privilege escalation, DoS, and information leaks.
50
Vulnerability1 · 1 read
CVE-2026-23137
- CVSS 3.1
- 5.5 medium
- EPSS
- <1%p1
- Published
- ·
- Modified
Description · NVD
In the Linux kernel, the following vulnerability has been resolved: of: unittest: Fix memory leak in unittest_data_add() In unittest_data_add(), if of_resolve_phandles() fails, the allocated unittest_data is not freed, leading to a memory leak. Fix this by using scope-based cleanup helper __free(kfree) for automatic resource cleanup. This ensures unittest_data is automatically freed when it goes out of scope in error paths. For the success path, use retain_and_null_ptr() to transfer ownership of the memory to the device tree and prevent double freeing.
In the news
2 storiesSeveral vulnerabilities have been discovered in the Linux kernel
Debian published DSA-6528-1, a Linux kernel update covering hundreds of CVEs.
35