Loading story…
Debian released Linux kernel security advisory DSA-6528-1, listing 1,313 CVE entries with potential impacts including privilege escalation, denial of service, and information disclosure. The update fixes affected kernel packages in Debian’s stable release, Trixie, through Linux source package version 6.12.111-1; Debian’s security tracker identifies version 6.12.107-1 as vulnerable.
Administrators should upgrade the relevant installed kernel packages, reboot into the patched kernel, and verify both the installed package version and the running kernel to ensure the fixes are active. The advisory does not report active exploitation, provide individual vulnerability descriptions or severity scores, or establish that every listed vulnerability affects every installation; exposure depends on the affected kernel components present and in use.
See real exploitation activity before you spend the cycle.
1 event from the most recent confirmed update back to the earliest known activity.
On September 29, 2026, Debian published advisory DSA-6528-1 and released Linux package version 6.12.111-1 to fix vulnerabilities affecting its stable release, Trixie. The 1,313 CVE entries cover potential privilege escalation, denial of service, and information disclosure; the advisory does not report active exploitation.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Debian Project released **Debian 13.7** ("Trixie"), refreshing its installation media with fixes associated with 92 prior security advisories and corrections to 106 source packages. The update covers core and widely deployed software including the Linux kernel, glibc, QEMU, Chromium, ImageMagick, Samba, PHP, Postfix, Roundcube, Wireshark, Perl, Python 3.13, mbedTLS, wolfSSL, U-Boot, and Cyrus IMAPD. The bundled patches address memory-safety defects, Secure Boot bypass conditions, authentication and authorization weaknesses, credential forwarding during HTTP redirects, archive-extraction flaws, and denial-of-service issues in network services. Existing Debian 13 systems configured to receive updates from `security.debian.org` should already contain most security fixes; organizations deploying from older Debian 13 installation media should update immediately after installation.
Sep 14, 2026
The Linux kernel project published an unusually large batch of **440 vulnerability advisories** over a two-day period, covering flaws across subsystems including DRM/AMDGPU, KVM, RDMA, Bluetooth, Wi‑Fi, SMB, Btrfs, ext4, SPI, media, IPMI, and networking. The disclosures describe memory-safety bugs, race conditions, information leaks, bounds-check failures, integer overflows, `NULL` dereferences, out-of-bounds reads, and use-after-free conditions, with reporting highlighting `ksmbd`, TIPC, and KVM/SEV as areas of potentially higher risk. Most issues were reported after fixes were available or already merged into stable kernel branches, though many advisories had not yet received CVSS scores. Ubuntu subsequently published security notices to address Linux kernel vulnerabilities across multiple supported releases, and the Canadian Centre for Cyber Security issued advisory **AV26-717** urging organizations to review the notices and apply updates. The affected Ubuntu versions listed were **14.04 LTS, 16.04 LTS, 20.04 LTS, 24.04 LTS, and 25.10**, underscoring the broad downstream impact of the kernel disclosure wave and the need for administrators to prioritize distribution-provided kernel patches, especially in environments exposing SMB services, TIPC, or SEV-enabled KVM systems.
Jul 27, 2026
dCERT published two advisories, `2025-1332` and `2025-1527`, warning of **multiple vulnerabilities in the Linux kernel**. The notices indicate that separate sets of kernel flaws were significant enough to warrant dedicated advisories, underscoring continued security risk in one of the most widely deployed operating system components across servers, cloud infrastructure, appliances, and embedded systems. While no public synopsis was included in the referenced advisories, the alerts point organizations to review affected kernel versions, assess exposure across Linux-based assets, and apply vendor-provided updates or mitigations. Because kernel vulnerabilities can affect core system security boundaries and stability, unpatched systems may face elevated risk depending on the specific flaws and deployment context.
Jun 29, 2026