Debian 13 Patches 68 Kernel Vulnerabilities in Massive Security Update
Debian 13 'Trixie' releases a massive kernel security update on July 31, addressing 68 vulnerabilities including critical networking and storage flaws.
On July 31, 2026, the Debian Project released a comprehensive security update for Debian 13 “Trixie,” pushing the linux kernel from version 6.12.94-1 to 6.12.100-1 and addressing 68 distinct vulnerabilities within the 6.12 LTS codebase (New Debian 13 ‘Trixie’ Kernel Security Update Fixes 68 Vulnerabilities — 9to5Linux).
This release marks a significant escalation in patch volume compared to the previous week’s update, which resolved only 12 issues, indicating a period of heightened vulnerability discovery across the kernel’s networking, storage, and virtualization layers. The sudden jump in remediated flaws suggests the security team is moving quickly to consolidate fixes for a dense cluster of risk vectors that have emerged during this phase of the LTS development cycle.
Among the most critical flaws patched are two vulnerabilities that threaten system integrity and remote accessibility, including CVE-2026-64530, a use-after-free error in the traffic-control subsystem that can enable remote denial-of-service and potential code execution, and CVE-2026-64531, codenamed OVSwrap, which allows local privilege escalation to root within the Open vSwitch datapath. The release notes detail additional high-severity issues, noting that flaws in the NTFS3 filesystem could trigger denial-of-service with memory corruption or information disclosure when processing crafted volume images, while two separate NVMe-over-TCP vulnerabilities create pathways for remote service disruption.
Storage and virtualization subsystems were equally targeted by this wave of fixes, requiring the closure of gaps across multiple critical drivers. The official Debian Security Tracker confirmation verifies that these fixes are distributed across the affected package versions, patching issues in the kernel’s networking stack, storage protocols, NTFS3 implementation, NVMe drivers, and virtio-vsock device driver (DSA-6405-1 — Debian Security Tracker).
Administrators managing Debian 13 deployments are advised to upgrade immediately to version 6.12.100-1, as earlier releases remain exposed to the full range of exploits detailed in these reports. The breadth of this patch set reflects a coordinated effort to neutralize the identified vulnerabilities before they can be leveraged for wider compromise across the distribution’s server and desktop infrastructure.