Do Son 
The Debian project has published security advisory DSA-6405-1, delivering a new Linux kernel update for Debian 13. The update resolves a total of 68 kernel vulnerabilities. Their impact spans local privilege escalation, denial of service, and information disclosure. The project urges every Debian 13.x user to upgrade promptly.
Four Critical Vulnerabilities
- CVE-2026-64530 resides in the net/sched traffic-control subsystem. It can ultimately trigger a use-after-free condition.
- CVE-2026-64534 involves NVMe over TCP. On the data-digest verification failure path, the code does not properly check an initialisation-failure state.
- CVE-2026-64535 also relates to NVMe over TCP. A digest mismatch during a specific data transfer can lead to a use-after-free.
- CVE-2026-64541 sits inside the SMC-R network communication subsystem. It can be exploited to access memory that has already been freed.
Actual Risk Depends on What You Run
Linux kernel advisories often list long CVE inventories, yet not every system faces the same exposure. The NVMe/TCP target flaws, for example, mainly threaten storage servers that enable and expose that service. SMC-R concerns tie chiefly to RDMA scenarios. Open vSwitch vulnerabilities weigh most heavily on virtualisation, container networking, and software-defined networks. Bluetooth flaws require a Bluetooth controller and the right privilege conditions.
Still, kernel vulnerabilities present a scattered attack surface. Many server administrators may not know whether the system has loaded a relevant module, or whether a container or virtualisation platform uses the affected functionality indirectly.
For Debian 13 users, the safest course remains straightforward. Install every kernel update the project releases, rather than trying to judge exposure on a case-by-case basis.
Reboot Required After Upgrade
Debian users can install the new kernel through the standard security update commands. After the package upgrade finishes, a reboot is still needed for the new kernel to take effect.
Once the system comes back, running uname -a confirms the active kernel version. Alternatively, check that the installed Debian kernel package matches version 6.12.100-1.
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
