Multiple vulnerabilities in the Debian Linux kernel (June 26, 2026)

unknownCVE-2026-45842 CVE-2026-45845 CVE-2025-22069 CVE-2026-46319 CVE-2026-31486 CVE-2026-23346

Multiple vulnerabilities have been discovered in the Debian Linux kernel. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality, and denial of service.

CSIRTS triage

vendor: Debian product: Linux kernel Privilege escalation Information disclosure Denial of service

What: Multiple vulnerabilities in the Debian Linux kernel can lead to privilege escalation and denial of service.
Who is affected: Users of the Debian Linux kernel.
Urgency: Remediation is urgent due to the severity of the vulnerabilities.
Action: Apply the latest security updates for the Debian Linux kernel.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Linux kernel

Get an email when a new Linux kernel advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-06-26
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0809/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-458420.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-458450.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2025-220690.20% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 10% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-463190.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-314860.10% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-233460.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-232470.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-461700.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-461170.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Low exploitation riskCVE-2025-712890.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-45842	coverage & exploitation status	NVD · CVE.org
CVE-2026-45845	coverage & exploitation status	NVD · CVE.org
CVE-2025-22069	coverage & exploitation status	NVD · CVE.org
CVE-2026-46319	coverage & exploitation status	NVD · CVE.org
CVE-2026-31486	coverage & exploitation status	NVD · CVE.org
CVE-2026-23346	coverage & exploitation status	NVD · CVE.org
CVE-2026-23247	coverage & exploitation status	NVD · CVE.org
CVE-2026-46170	coverage & exploitation status	NVD · CVE.org
CVE-2026-46117	coverage & exploitation status	NVD · CVE.org
CVE-2025-71289	coverage & exploitation status	NVD · CVE.org
CVE-2026-31613	coverage & exploitation status	NVD · CVE.org
CVE-2026-43331	coverage & exploitation status	NVD · CVE.org
CVE-2026-46158	coverage & exploitation status	NVD · CVE.org
CVE-2026-46320	coverage & exploitation status	NVD · CVE.org
CVE-2026-46137	coverage & exploitation status	NVD · CVE.org
CVE-2026-45841	coverage & exploitation status	NVD · CVE.org
CVE-2026-46331	coverage & exploitation status	NVD · CVE.org
CVE-2026-23469	coverage & exploitation status	NVD · CVE.org
CVE-2026-31420	coverage & exploitation status	NVD · CVE.org
CVE-2026-46203	coverage & exploitation status	NVD · CVE.org
CVE-2026-31663	coverage & exploitation status	NVD · CVE.org
CVE-2026-45846	coverage & exploitation status	NVD · CVE.org
CVE-2026-46323	coverage & exploitation status	NVD · CVE.org
CVE-2025-68768	coverage & exploitation status	NVD · CVE.org
CVE-2026-46315	coverage & exploitation status	NVD · CVE.org
CVE-2025-68251	coverage & exploitation status	NVD · CVE.org
CVE-2026-46321	coverage & exploitation status	NVD · CVE.org
CVE-2026-52908	coverage & exploitation status	NVD · CVE.org
CVE-2026-45840	coverage & exploitation status	NVD · CVE.org
CVE-2026-45844	coverage & exploitation status	NVD · CVE.org
CVE-2026-52910	coverage & exploitation status	NVD · CVE.org
CVE-2026-45930	coverage & exploitation status	NVD · CVE.org
CVE-2026-46274	coverage & exploitation status	NVD · CVE.org
CVE-2026-46244	coverage & exploitation status	NVD · CVE.org
CVE-2026-31717	coverage & exploitation status	NVD · CVE.org
CVE-2026-52911	coverage & exploitation status	NVD · CVE.org
CVE-2026-45843	coverage & exploitation status	NVD · CVE.org
CVE-2026-46316	coverage & exploitation status	NVD · CVE.org
CVE-2026-46160	coverage & exploitation status	NVD · CVE.org
CVE-2026-43303	coverage & exploitation status	NVD · CVE.org
CVE-2026-43245	coverage & exploitation status	NVD · CVE.org
CVE-2026-52909	coverage & exploitation status	NVD · CVE.org
CVE-2026-23394	coverage & exploitation status	NVD · CVE.org
CVE-2026-45838	coverage & exploitation status	NVD · CVE.org
CVE-2026-23272	coverage & exploitation status	NVD · CVE.org
CVE-2026-31560	coverage & exploitation status	NVD · CVE.org
CVE-2026-46216	coverage & exploitation status	NVD · CVE.org
CVE-2026-46275	coverage & exploitation status	NVD · CVE.org

+5 more CVEs referenced in this advisory.

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

unknownUSN-8666-2: Linux kernel (Azure) vulnerabilitiesubuntu
unknownUSN-8630-5: Linux kernel (Raspberry Pi) vulnerabilitiesubuntu
medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
high[UPDATE] [high] Linux Kernel: Multiple Vulnerabilitiescert-bund
high[UPDATE] [high] Linux Kernel: Multiple Vulnerabilitiescert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
high[UPDATE] [high] Linux Kernel: Multiple Vulnerabilitiescert-bund
medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attackcert-bund
high[UPDATE] [high] Linux Kernel: Vulnerability allows privilege escalationcert-bund

Recent advisories for Debian Linux kernel

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownMultiple vulnerabilities in Debian Linux kernel (August 21, 2026)cert-fr-avis · 2026-08-21
unknownMultiple vulnerabilities in Debian LTS Linux kernel (August 21, 2026)cert-fr-avis · 2026-08-21
unknownMultiple vulnerabilities in Debian Linux kernel (August 14, 2026)cert-fr-avis · 2026-08-14
unknownMultiple vulnerabilities in Debian LTS Linux kernel (August 14, 2026)cert-fr-avis · 2026-08-14
unknownMultiple vulnerabilities in Debian Linux kernel (August 07, 2026)cert-fr-avis · 2026-08-07
unknownMultiple vulnerabilities in Debian LTS Linux kernel (August 07, 2026)cert-fr-avis · 2026-08-07