Multiple vulnerabilities in Debian LTS Linux kernel (July 31, 2026)

unknownpublic exploitCVE-2026-53398 CVE-2026-53381 CVE-2026-63807 CVE-2026-53138 CVE-2026-63830 CVE-2026-53391

Multiple vulnerabilities have been discovered in Debian LTS Linux kernel. Some of them allow an attacker to cause privilege escalation, data confidentiality breach and denial of service.

CSIRTS triage

vendor: Debian product: Linux kernel Privilege escalation Information disclosure Denial of serviceaffected: LTS

What: Multiple vulnerabilities in the Linux kernel allow privilege escalation, data confidentiality breach, and denial of service.
Who is affected: Systems running Debian LTS Linux kernel.
Urgency: High; multiple attack vectors including privilege escalation require prompt patching.
Action: Apply Debian security updates for the Linux kernel package.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Linux kernel

Get an email when a new Linux kernel advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-07-31
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0957/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-533980.51% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-533810.14% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-638070.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-531380.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-638300.35% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-533910.52% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all EPSS-scored CVEs.
Low exploitation riskCVE-2025-231310.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-642460.16% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-531630.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-637980.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-53398	coverage & exploitation status	NVD · CVE.org
CVE-2026-53381	coverage & exploitation status	NVD · CVE.org
CVE-2026-63807	coverage & exploitation status	NVD · CVE.org
CVE-2026-53138	coverage & exploitation status	NVD · CVE.org
CVE-2026-63830	coverage & exploitation status	NVD · CVE.org
CVE-2026-53391	coverage & exploitation status	NVD · CVE.org
CVE-2025-23131	coverage & exploitation status	NVD · CVE.org
CVE-2026-64246	coverage & exploitation status	NVD · CVE.org
CVE-2026-53163	coverage & exploitation status	NVD · CVE.org
CVE-2026-63798	coverage & exploitation status	NVD · CVE.org
CVE-2026-63801	coverage & exploitation status	NVD · CVE.org
CVE-2026-63827	coverage & exploitation status	NVD · CVE.org
CVE-2026-53397	coverage & exploitation status	NVD · CVE.org
CVE-2026-64252	coverage & exploitation status	NVD · CVE.org
CVE-2026-53327	coverage & exploitation status	NVD · CVE.org
CVE-2026-46252	coverage & exploitation status	NVD · CVE.org
CVE-2026-53383	coverage & exploitation status	NVD · CVE.org
CVE-2026-63800	coverage & exploitation status	NVD · CVE.org
CVE-2026-63817	coverage & exploitation status	NVD · CVE.org
CVE-2026-63795	coverage & exploitation status	NVD · CVE.org
CVE-2026-64249	coverage & exploitation status	NVD · CVE.org
CVE-2026-63835	coverage & exploitation status	NVD · CVE.org
CVE-2026-63833	coverage & exploitation status	NVD · CVE.org
CVE-2026-63796	coverage & exploitation status	NVD · CVE.org
CVE-2026-64254	coverage & exploitation status	NVD · CVE.org
CVE-2026-53158	coverage & exploitation status	NVD · CVE.org
CVE-2026-53139	coverage & exploitation status	NVD · CVE.org
CVE-2026-53382	coverage & exploitation status	NVD · CVE.org
CVE-2026-53362	coverage & exploitation status	NVD · CVE.org
CVE-2026-53403	coverage & exploitation status	NVD · CVE.org
CVE-2026-23302	coverage & exploitation status	NVD · CVE.org
CVE-2026-53157	coverage & exploitation status	NVD · CVE.org
CVE-2026-53167	coverage & exploitation status	NVD · CVE.org
CVE-2026-64191	coverage & exploitation status	NVD · CVE.org
CVE-2026-63794	coverage & exploitation status	NVD · CVE.org
CVE-2026-63824	coverage & exploitation status	NVD · CVE.org
CVE-2026-63822	coverage & exploitation status	NVD · CVE.org
CVE-2026-63828	coverage & exploitation status	NVD · CVE.org
CVE-2026-64529	coverage & exploitation status	NVD · CVE.org
CVE-2026-53388	coverage & exploitation status	NVD · CVE.org
CVE-2026-23278	coverage & exploitation status	NVD · CVE.org
CVE-2026-31451	coverage & exploitation status	NVD · CVE.org
CVE-2026-63809	coverage & exploitation status	NVD · CVE.org
CVE-2026-63836	coverage & exploitation status	NVD · CVE.org
CVE-2026-63814	coverage & exploitation status	NVD · CVE.org
CVE-2026-64188	coverage & exploitation status	NVD · CVE.org
CVE-2026-63831	coverage & exploitation status	NVD · CVE.org
CVE-2026-53359	coverage & exploitation status	NVD · CVE.org

+11 more CVEs referenced in this advisory.

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
high[UPDATE] [high] Linux Kernel: Multiple Vulnerabilitiescert-bund
medium[NEW] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
medium[NEW] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
medium[NEW] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attackcert-bund
medium[NEW] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
unknownDebian Linux Kernel Multiple Vulnerabilitieshkcert
medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
medium[NEW] [medium] Linux Kernel: Vulnerability allows Denial of Servicecert-bund

Recent advisories for Debian LTS Linux

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownMultiple vulnerabilities in Debian LTS Linux kernel (July 24, 2026)cert-fr-avis · 2026-07-24
unknownMultiple vulnerabilities in Debian LTS Linux kernel (July 10, 2026)cert-fr-avis · 2026-07-10