Multiple vulnerabilities in Debian LTS Linux kernel (July 24, 2026)

unknownpublic exploitCVE-2026-53138 CVE-2025-23131 CVE-2026-53163 CVE-2026-53327 CVE-2026-46252 CVE-2026-53158

Multiple vulnerabilities have been discovered in the Debian LTS Linux kernel. They allow an attacker to cause privilege escalation, a breach of data confidentiality, and a breach of data integrity.

CSIRTS triage

vendor: Debian product: Linux kernel Privilege escalation Information disclosureOther

What: Multiple vulnerabilities allow an attacker to cause privilege escalation, breach data confidentiality, and breach data integrity.
Who is affected: All users of the Debian LTS Linux kernel are potentially affected by these vulnerabilities.
Urgency: Remediation is important as these vulnerabilities can lead to significant security risks, although exploitation is not currently reported.
Action: Update to the latest kernel version provided by Debian.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Linux kernel

Get an email when a new Linux kernel advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-07-24
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0929/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-531380.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all scored CVEs.
Low exploitation riskCVE-2025-231310.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.
Low exploitation riskCVE-2026-531630.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all scored CVEs.
Low exploitation riskCVE-2026-533270.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all scored CVEs.
Low exploitation riskCVE-2026-462520.09% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all scored CVEs.
Low exploitation riskCVE-2026-531580.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all scored CVEs.
Low exploitation riskCVE-2026-531390.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all scored CVEs.
Low exploitation riskCVE-2026-533620.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all scored CVEs.
Low exploitation riskCVE-2026-233020.09% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all scored CVEs.
Low exploitation riskCVE-2026-531570.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-53138	coverage & exploitation status	NVD · CVE.org
CVE-2025-23131	coverage & exploitation status	NVD · CVE.org
CVE-2026-53163	coverage & exploitation status	NVD · CVE.org
CVE-2026-53327	coverage & exploitation status	NVD · CVE.org
CVE-2026-46252	coverage & exploitation status	NVD · CVE.org
CVE-2026-53158	coverage & exploitation status	NVD · CVE.org
CVE-2026-53139	coverage & exploitation status	NVD · CVE.org
CVE-2026-53362	coverage & exploitation status	NVD · CVE.org
CVE-2026-23302	coverage & exploitation status	NVD · CVE.org
CVE-2026-53157	coverage & exploitation status	NVD · CVE.org
CVE-2026-53167	coverage & exploitation status	NVD · CVE.org
CVE-2026-23278	coverage & exploitation status	NVD · CVE.org
CVE-2026-31451	coverage & exploitation status	NVD · CVE.org
CVE-2026-53359	coverage & exploitation status	NVD · CVE.org
CVE-2026-23272	coverage & exploitation status	NVD · CVE.org
CVE-2026-53325	coverage & exploitation status	NVD · CVE.org
CVE-2026-52928	coverage & exploitation status	NVD · CVE.org
CVE-2026-53366	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
high[UPDATE] [high] Linux Kernel: Multiple Vulnerabilitiescert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
unknownMultiples vulnérabilités dans le noyau Linux de Debian LTS (31 juillet 2026)cert-fr-avis
medium[NEW] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
medium[NEW] [medium] Linux Kernel: Vulnerability allows Denial of Servicecert-bund
unknownUSN-8615-2: Linux kernel (Raspberry Pi) vulnerabilitiesubuntu
highUSN-8619-1: Linux kernel (HWE) vulnerabilitiesubuntu

Recent advisories for Debian LTS Linux

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownMultiples vulnérabilités dans le noyau Linux de Debian LTS (31 juillet 2026)cert-fr-avis · 2026-07-31
unknownMultiple vulnerabilities in Debian LTS Linux kernel (July 10, 2026)cert-fr-avis · 2026-07-10