📋 ADVISORIES
- Debian 13 Trixie kernel update DSA-6528-1 patches 1,313 CVEs in Linux 6.12
Debian has released a massive Linux kernel security update fixing 1,313 CVEs in Debian 13 Trixie.- Applies to Debian 13 'Trixie' users running the Linux 6.12 LTS kernel; fixes shipped in linux source package 6.12.111-1 via advisory DSA-6528-1, published September 29, 2026 by Salvatore Bonaccorso.
- The flaws could lead to privilege escalation, denial of service, or information leaks; most of the 1,313 CVEs are low-severity, highly conditional, or affect irrelevant subsystems.
- The large count reflects a CVE policy change assigning CVEs to any potential security fix, plus Debian accumulating upstream fixes across multiple kernel versions into one periodic update.
- Example CVEs span 2024-2026, including CVE-2024-52560, CVE-2025-21817, CVE-2026-23137, and CVE-2026-100079; version 6.12.107-1 is marked vulnerable and 6.12.111-1 fixed.
- No exploitation in the wild is reported; the advisory provides no per-CVE technical breakdown or shared attack method.
Sources 📄 Source: lwn.net · 📎 Coverage: 9to5linux.com · 👁 via Cyber Security News, cryptika.com (discovered)
🔓 CVEs & KEV
- CVE-2026-105080 — C4illin ConvertX — CVSS 9.4 — In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files,...