Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks
Debian's DSA-6528-1 updates Trixie's Linux kernel to 6.12.111-1, fixing 1,313 CVE entries covering privilege escalation, DoS, and information leaks.
50
- Mentions · 7d0
- Mentions · 30d0
- All mentions11
- First seenSep 5, 2026
- Last mentionedOct 3, 2026
Timeline
11 articles · newest firstVulnerability Discovery and Exploitation Trends in the AI Era
Google Threat Intelligence reports monthly CVE disclosures doubled to 10,740 by August 2026, exploited vulnerabilities rose to 18 monthly, and AI-assisted finds skew toward RCE.
62
USN-8851-1: Linux kernel vulnerabilities
Ubuntu USN-8851-1 patches three Linux kernel flaws in NFS server daemon, IPv6, and Netfilter that could allow system compromise.
22
New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks
New Spectre-v2 variant BTR lets attackers leak arbitrary memory, including root password hashes, from Intel, AMD, and Arm systems via stale JIT branch predictions.
70
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
BTR, a new Spectre-v2 variant from VUSec researchers, hijacks stale JIT branch predictions to leak kernel secrets from fully patched systems.
72
USN-8728-3: Linux kernel (Oracle) vulnerabilities
Ubuntu USN-8728-3 updates the Oracle cloud Linux kernel, fixing Arm TLB and AMD Zen 2 privilege escalation flaws.
18
USN-8816-2: Linux kernel vulnerabilities
Ubuntu USN-8816-2 fixes multiple Linux kernel vulnerabilities across architecture, driver, and file system subsystems.
12
USN-8729-6: Linux kernel (AWS) vulnerabilities
Ubuntu USN-8729-6 patches multiple Linux kernel flaws for AWS deployments across architectures and drivers.
12
New File Notification Attack Lets Hackers Track User Activity Across Linux, Windows and macOS
Graz University of Technology researchers show file-notification APIs (inotify, ReadDirectoryChangesW, FSEvents) leak user activity across Linux, Windows, macOS without privileges.
60
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
Linux kernel flaw CVE-2026-89775 lets ARM64 KVM guests read and write freed host memory, enabling guest-to-host escape.
52
Trusting-Trust Attack against an Entire Linux Distribution (via the strip utility)
ArXiv paper shows the trusting-trust compiler backdoor technique can compromise an entire Linux distribution via the strip utility.
48
Related CVEs
by mentions- CVE-2026-53221<1%9.8Linux kernel: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
- CVE-2026-53131<1%9.4Linux kernel: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`…
- CVE-2025-10263<1%9.1Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &…
- CVE-2025-38724<1%7.8Linux kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that…
- CVE-2023-3390<1%7.8A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c
- CVE-2025-54518<1%7.3Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a…
- Linux Kernel USB Type-C UCSI Debugfs Lifetime Bug Allows Local DoS
- CVE-2026-23137<1%5.5Linux kernel: of: unittest
- CVE-2025-21817<1%5.5Linux kernel: block: mark GFP_NOIO around sysfs ->store() sysfs ->store is called with queue freezed, meantime we have…
- CVE-2026-64507<1%—Linux kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2…
Appears with
- Ubuntuorganization · 5
- Armorganization · 3
- AMDorganization · 3
- Oracleorganization · 2
- GraalVMorganization · 2
- Mozilla Firefoxorganization · 2
- Scuola Superiore Sant'Annaorganization · 2
- Intelorganization · 2
- VUSecorganization · 2
- TOTOLINKorganization · 1
- Canonicalorganization · 1
- Salvatore Bonaccorsoorganization · 1
- Debianorganization · 1
- Edgeorganization · 1
- GCCorganization · 1
- Microsoftorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.