Multiple vulnerabilities in Debian LTS Linux kernel (August 07, 2026)

unknownpublic exploitCVE-2026-64376 CVE-2026-53398 CVE-2026-64552 CVE-2026-53381 CVE-2026-64275 CVE-2026-64274

Multiple vulnerabilities have been discovered in Debian LTS Linux kernel. They allow an attacker to cause privilege escalation, breach of data confidentiality and denial of service.

CSIRTS triage

vendor: Debian product: Linux kernel (LTS)Privilege escalation Information disclosure Denial of service

What: Multiple LTS kernel vulnerabilities allow privilege escalation, data confidentiality breaches, and denial of service.
Who is affected: Systems running affected Debian LTS Linux kernel versions, including long-term support deployments.
Urgency: High; affects stable/LTS systems relied upon for production stability.
Action: Apply Debian LTS kernel security updates; coordinate with operational windows for systems dependent on stability.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Linux kernel (LTS)

Get an email when a new Linux kernel (LTS) advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-08-07
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0982/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-643760.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-533980.51% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-645520.14% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-533810.14% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-642750.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 11% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-642740.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 11% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-645380.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-644520.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-644830.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-643220.16% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-64376	coverage & exploitation status	NVD · CVE.org
CVE-2026-53398	coverage & exploitation status	NVD · CVE.org
CVE-2026-64552	coverage & exploitation status	NVD · CVE.org
CVE-2026-53381	coverage & exploitation status	NVD · CVE.org
CVE-2026-64275	coverage & exploitation status	NVD · CVE.org
CVE-2026-64274	coverage & exploitation status	NVD · CVE.org
CVE-2026-64538	coverage & exploitation status	NVD · CVE.org
CVE-2026-64452	coverage & exploitation status	NVD · CVE.org
CVE-2026-64483	coverage & exploitation status	NVD · CVE.org
CVE-2026-64322	coverage & exploitation status	NVD · CVE.org
CVE-2026-64470	coverage & exploitation status	NVD · CVE.org
CVE-2026-64461	coverage & exploitation status	NVD · CVE.org
CVE-2026-64413	coverage & exploitation status	NVD · CVE.org
CVE-2026-64512	coverage & exploitation status	NVD · CVE.org
CVE-2026-64409	coverage & exploitation status	NVD · CVE.org
CVE-2026-64380	coverage & exploitation status	NVD · CVE.org
CVE-2026-64268	coverage & exploitation status	NVD · CVE.org
CVE-2026-64489	coverage & exploitation status	NVD · CVE.org
CVE-2026-64510	coverage & exploitation status	NVD · CVE.org
CVE-2026-64480	coverage & exploitation status	NVD · CVE.org
CVE-2026-64399	coverage & exploitation status	NVD · CVE.org
CVE-2026-63818	coverage & exploitation status	NVD · CVE.org
CVE-2026-64454	coverage & exploitation status	NVD · CVE.org
CVE-2026-64531	coverage & exploitation status	NVD · CVE.org
CVE-2026-53399	coverage & exploitation status	NVD · CVE.org
CVE-2026-53400	coverage & exploitation status	NVD · CVE.org
CVE-2026-64365	coverage & exploitation status	NVD · CVE.org
CVE-2026-53138	coverage & exploitation status	NVD · CVE.org
CVE-2026-63830	coverage & exploitation status	NVD · CVE.org
CVE-2026-64333	coverage & exploitation status	NVD · CVE.org
CVE-2025-23131	coverage & exploitation status	NVD · CVE.org
CVE-2026-64514	coverage & exploitation status	NVD · CVE.org
CVE-2026-64279	coverage & exploitation status	NVD · CVE.org
CVE-2026-64337	coverage & exploitation status	NVD · CVE.org
CVE-2026-64550	coverage & exploitation status	NVD · CVE.org
CVE-2026-64430	coverage & exploitation status	NVD · CVE.org
CVE-2026-64497	coverage & exploitation status	NVD · CVE.org
CVE-2026-64189	coverage & exploitation status	NVD · CVE.org
CVE-2026-63798	coverage & exploitation status	NVD · CVE.org
CVE-2026-63810	coverage & exploitation status	NVD · CVE.org
CVE-2026-63801	coverage & exploitation status	NVD · CVE.org
CVE-2026-63815	coverage & exploitation status	NVD · CVE.org
CVE-2026-63827	coverage & exploitation status	NVD · CVE.org
CVE-2026-64304	coverage & exploitation status	NVD · CVE.org
CVE-2026-64557	coverage & exploitation status	NVD · CVE.org
CVE-2026-53397	coverage & exploitation status	NVD · CVE.org
CVE-2026-64252	coverage & exploitation status	NVD · CVE.org
CVE-2026-64276	coverage & exploitation status	NVD · CVE.org

+12 more CVEs referenced in this advisory.

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

medium[NEW] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
high[UPDATE] [high] Linux Kernel: Vulnerability allows privilege escalationcert-bund
high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
unknownMultiple vulnerabilities in Red Hat Linux kernel (August 07, 2026)cert-fr-avis
unknownMultiple vulnerabilities in Debian Linux kernel (August 07, 2026)cert-fr-avis
medium[NEW] [medium] Linux Kernel: Multiple vulnerabilities allow Denial of Servicecert-bund
medium[NEW] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
medium[NEW] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
medium[NEW] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attackcert-bund
highCVE-2026-64333: USB: serial: digi_acceleport: fix write buffer corruptionmsrc
mediumCVE-2026-64531: net: openvswitch: reject oversized nested action attrsmsrc

Recent advisories for Debian LTS Linux

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownMultiple vulnerabilities in Debian LTS Linux kernel (July 31, 2026)cert-fr-avis · 2026-07-31
unknownMultiple vulnerabilities in Debian LTS Linux kernel (July 24, 2026)cert-fr-avis · 2026-07-24
unknownMultiple vulnerabilities in Debian LTS Linux kernel (July 10, 2026)cert-fr-avis · 2026-07-10