Massive Debian 13 Linux Kernel Security Update Patches 68 Vulnerabilities (9to5linux.com)
- Reference: 0184824418
- News link: https://linux.slashdot.org/story/26/08/03/0219205/massive-debian-13-linux-kernel-security-update-patches-68-vulnerabilities
- Source link: https://9to5linux.com/new-debian-13-trixie-kernel-security-update-fixes-68-vulnerabilities
> Coming ten days after the previous Linux kernel security update, which only fixed 12 vulnerabilities that may lead to a privilege escalation, denial of service, or information leaks, the new Debian 13 Linux kernel security update is a massive one, and it patches no less than 68 security vulnerabilities in the Linux 6.12 LTS kernel.
>
> ebian 13 "Trixie" kernel security update are [3]CVE-2026-64530 , a use-after-free in the traffic-control subsystem leading to remote denial-of-service with potential for remote code execution, and [4]CVE-2026-64531 (a.k.a. OVSwrap), a local-root vulnerability in the Open vSwitch datapath leading to local privilege escalation to root...
>
> All Debian 13 "Trixie" users are urged to update their installations to Linux kernel 6.12.100-1 as soon as possible.
[1] https://www.slashdot.org/~prisoninmate
[2] https://9to5linux.com/new-debian-13-trixie-kernel-security-update-fixes-68-vulnerabilities
[3] https://security-tracker.debian.org/tracker/CVE-2026-64530
[4] https://security-tracker.debian.org/tracker/CVE-2026-64531
Re: (Score:3)
I don't have a side here. I use both Windows and Linux. Windows pisses me off, Linux pisses me off.
What I care about is how it's hard to have an honest conversation about any of this stuff without it becoming a Microsoft hate-fest or ridiculous assumptions about open source being somehow inherently more secure.
Re: (Score:2)
> What I care about is how it's hard to have an honest conversation about any of this stuff without it becoming a Microsoft hate-fest
That's a very, very weird thing to care about unless you're being paid to feel that way. Since Microsoft has done so much shit to so many people in so many ways it's otherwise inexplicable that anyone would come out of the woodwork to defend them. It's like when George Bush pointed out that Hitler had a dog.
Re: (Score:2)
No, I mean because I care about Slashdot and having an interesting, insightful debate here. I know, I'm expected too much, but it happens sometimes.
We are going through a transition where these tools are just becoming available and a massive number of bugs are being fixed, but in future they will be standard for software developers as part of the QA process.
Re: (Score:2)
I still consider them terrible people for pushing systemd through.
68 sounds really small by recent comparisons (Score:2)
Isn't everyone patching 100s of vulns every month at the moment?
Re: (Score:2)
> Isn't everyone patching 100s of vulns every month at the moment?
That would be fixed in the current tip of the kernel tree.
But there are multiple supported kernel versions, and many vulnerabilities are not present in the older kernels so those will not be backported. Either the feature doesn't exist in the older kernel, or it isn't enabled by default, or there's a dependency on a newer kernel.
Re: (Score:3)
Not all of them are security updates. Not all of them are relevant to the kernel shipped by Debian.
Re: (Score:2)
I dunno why they didn't just add one more. It'd be appropriate for Trixie.
Why so negative? (Score:4, Insightful)
I am surprised at the many negative comments about the recently found CVEs, about Ubuntu patching LTS and the many other complaints and whining.
Finding these bugs and patching them is a massive security win for Linux and F/OSS operating systems using Linux, and it is awesome to see how many people are working together to deliver these gains to everyone - FOR FREE!
Backporting patches into LTS is pretty thankless but absolutely necessary.
How about a bit more enthusiasm and thankfulness? You are getting an entire OS for free and get to keep (most of) your privacy. When was the last time you helped backport, or donated?
Re: (Score:2)
Exactly. On top of that, a typical apt update/upgrade takes less than a minute. For some users, the need for a reboot after a kernel update is a pain but you can do that when convenient.
Any windows update beyond antivirus seem to take at least 30 minutes, uses half the machines resources, and requires a reboot (or two sometimes).
with enough (mechanical) eyes, all bugs are shallo (Score:2)
It turns out that, now that AI code review has gotten good enough, there is no difference, eyes wise, between open and closed source software.
If anything, for most projects, paid commercial SW (FOSS or not) has an advantage, because they have the money to pay for the mechanical eyes without depending "on the kindness of strangers". The Linux kernel and some other big or well known non-paid-for projects will have no problem getting mechanical eyes. The smaller, or more obscure projects, not so much.
ESR shoul
Now we'll see how long it takes Ubunto to update (Score:2)
... their packages.
Re:Just wait a cotton pickin' minute. (Score:5, Funny)
He came to my apartment the other day to upgrade my Linux. So he didn't visit your machine? How did you offend him?
Re: (Score:2)
*our Linux. (Remember memes?) He’s making a list, checking it twice, gonna find out who’s naughty or nice.
Re: (Score:2)
That's almost as impressive as the time you got Youtube to come round to your house and film you for their website!
Re: (Score:2)
different distros use different kernels. Linus et al patches the supported kernels that you can find on kernel.org but then distros like Ubuntu use a kernel that is no longer supported so they have to backport the patches.
Re: Just wait a cotton pickin' minute. (Score:2)
6.12 is a SLTS. For the time being Greg -KH (not Linus) pathces it. In the future, when Greg stops, it will be the CIP.
Once the Kernel is patchedM each distro decides when to offer the patched kernel as an update. Some distros take longer than other.
Debian, being the foubdation of so many other distros, is newsworthy in that sense
Re: (Score:2)
According to this, 26.06 LTS got a kernel update fix a couple of weeks ago in the middle of July
[1]https://launchpad.net/ubuntu/+... [launchpad.net]
Granted, 7.0 is no longer supported so patches are being backported by Ubuntu.
[1] https://launchpad.net/ubuntu/+source/linux
Re: (Score:2)
From that page, all three of the standard support LTS releases got updates in mid July.
I assume that page does not include updates to the expanded security maintenance versions given that they all have cutoffs on that page at almost exactly 5 years, and presumably they do provide some nonzero number of kernel updates in that program.