Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks
Debian's DSA-6528-1 updates Trixie's Linux kernel to 6.12.111-1, fixing 1,313 CVE entries covering privilege escalation, DoS, and information leaks.
Debian security team member Salvatore Bonaccorso published advisory DSA-6528-1 on September 29, 2026, a major Linux kernel update for the stable Trixie release in source package 6.12.111-1. The advisory aggregates 1,313 CVE entries from 2024, 2025, and 2026, with listed examples including CVE-2024-52560, CVE-2025-21817, CVE-2026-23137, and CVE-2026-100079. Potential impacts include privilege escalation, denial of service, and information leaks; Debian's security tracker marks version 6.12.107-1 as vulnerable and 6.12.111-1 as fixed. No exploitation in the wild was reported, and Debian cautions that the CVE count alone does not indicate equal risk across installations.
- DSA-6528-1 patches 1,313 CVE entries in Debian Trixie's Linux kernel
- Fixed package 6.12.111-1; 6.12.107-1 marked vulnerable in Debian's tracker
- Covered flaws enable privilege escalation, denial of service, and information leaks
- No in-the-wild exploitation reported; CVE count alone does not imply equal risk
- Admins should run apt-get upgrade, reboot, and verify the running kernel version
- Organizations
- DebianLinuxSalvatore Bonaccorso
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-3390 | A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c | 7.8 | <1% | ||
CVE-2024-52560+1 related CVE | Linux kernel: fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr() Extended the `mi_enum_attr()`… | 5.5 | <1% | ||
| CVE-2026-100079 | Linux Kernel USB Type-C UCSI Debugfs Lifetime Bug Allows Local DoS | 5.5 | — | ||
| CVE-2026-23137 | Linux kernel: of: unittest | 5.5 | <1% |
From the original article
3 min read at cybersecuritynews.com
Debian has released a major Linux kernel security update covering 1,313 CVE entries, addressing flaws that could allow privilege escalation, denial of service, and information leaks. The fixes are available for Debian’s stable release, Trixie, in Linux source package version 6. 12.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.