GCVE-1988-2026-0525

Vulnerability from gna-1988 – Published: 2026-11-02 09:47 – Updated: 2026-11-02 09:47
VLAI
Title
[Bugtraq] [SECURITY] [DSA 6477-1] linux security update
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6477-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 29, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : linux CVE ID : CVE-2025-40074 CVE-2026-64216 CVE-2026-64581 CVE-2026-74626 CVE-2026-74653 CVE-2026-74662 CVE-2026-80536 CVE-2026-80557 CVE-2026-80562 CVE-2026-80572 CVE-2026-80583 CVE-2026-80590 CVE-2026-80725 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.107-1. We recommend that you upgrade your linux packages. For the detailed security status of linux please refer to its security tracker page at: https://security-tracker.debian.org/tracker/linux Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmqTQrxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0Saow//fbWwrFh9SBsw3mE6H0/A7QJ7BJjh/NzMCHjxkvVJxCoK+A1Vmk6wLrru v7Fd2Qy4OX8zGOWT8XBa9oJaLJ9dlgVGZVs8Raq4e/NQzFYy8lRBx7lHWixSn4pP 6YeHXYLn7J8Bbpggk1xJsP5r5ZEo8EfDH2+KNo+d1RWSDoGSc1kWSn8FYuaKxabM qvmtgVTRrPthc6I+ar468NK+N9+bo2vbQvF2fIeo0I7l1hqBMr2pConmp+1tkoOM QjHyseW2mf8d0sBSMsjJW1kO1hfgwNcvLxkR9iy2UgDBgo0U/XLcGEqSB+ohBmVa cSM9lIdEvUdjpPTvhB9Og0KK4Fxx479vyeCUzx8/l4cZCdM2Ji0iXAZ5wJe8/6FC Xoyzpyo4f2ysbZperSN5pslNK8MDUFklrVAXVYowVJgoTm3lyM/K+x+pdnxwL61e c7hYstDIcCsYXXxw6er11V1ejphGc7mVBmSmoQieuMEKmPFoORIDGoOg3hUE53q/ UsUnYOXYY8xtd+RixATq2vuyN2bfdPTYEtKvPgI9DZDySkKVFO7k1gZCUcihCyKD VAtru8IfK7U03PrJ1SBXkFcxZD7kG0zYe7V4iMENTfWwSFFr0aveCAJgwMqtP+CO lNCz4BO0BEAhhWUVqeVXgBolCgW5mEJL2V48Q4aeAtkkmBJhxIc= =1YHR -----END PGP SIGNATURE-----
Severity
No CVSS data available.
Assigner
VULNARCHIVE GNA GNA-1988
GNA scorecard E 38/100 over 552 records in the last 180 days details
References
Impacted products
Vendor Product Version CPE status
Linux security update Affected: unknown
guessed Create a notification for this product.
Credits
Salvatore Bonaccorso
Relationships
reference GCVE-1988-2026-0525 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "security update",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Salvatore Bonaccorso"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-6477-1                   security@debian.org\nhttps://www.debian.org/security/                     Salvatore Bonaccorso\nAugust 29, 2026                       https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\nPackage        : linux\nCVE ID         : CVE-2025-40074 CVE-2026-64216 CVE-2026-64581 CVE-2026-74626\nCVE-2026-74653 CVE-2026-74662 CVE-2026-80536 CVE-2026-80557\nCVE-2026-80562 CVE-2026-80572 CVE-2026-80583 CVE-2026-80590\nCVE-2026-80725\nSeveral vulnerabilities have been discovered in the Linux kernel that\nmay lead to a privilege escalation, denial of service or information\nleaks.\nFor the stable distribution (trixie), these problems have been fixed in\nversion 6.12.107-1.\nWe recommend that you upgrade your linux packages.\nFor the detailed security status of linux please refer to its security\ntracker page at:\nhttps://security-tracker.debian.org/tracker/linux\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----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\nlNCz4BO0BEAhhWUVqeVXgBolCgW5mEJL2V48Q4aeAtkkmBJhxIc=\n=1YHR\n-----END PGP SIGNATURE-----"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T09:47:20Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/item/970535bc82f5aecf8b200eb1ce68981fd3accad6ab96e513c496dafcd72ca471"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/7LNUYYHLPJNFIHTE53VJESYY32V4FVRA/"
        },
        {
          "url": "https://security-tracker.debian.org/tracker/linux"
        },
        {
          "url": "https://www.debian.org/security/"
        },
        {
          "url": "https://www.debian.org/security/faq"
        }
      ],
      "source": {
        "defect": [
          "E1x0PrW-000000091lB-1Gw3%40seger.debian.org"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "[Bugtraq] [SECURITY] [DSA 6477-1] linux security update",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2025-40074",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64216",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64581",
              "type": "related"
            },
            {
              "destId": "CVE-2026-74626",
              "type": "related"
            },
            {
              "destId": "CVE-2026-74653",
              "type": "related"
            },
            {
              "destId": "CVE-2026-74662",
              "type": "related"
            },
            {
              "destId": "CVE-2026-80536",
              "type": "related"
            },
            {
              "destId": "CVE-2026-80557",
              "type": "related"
            },
            {
              "destId": "CVE-2026-80562",
              "type": "related"
            },
            {
              "destId": "CVE-2026-80572",
              "type": "related"
            },
            {
              "destId": "CVE-2026-80583",
              "type": "related"
            },
            {
              "destId": "CVE-2026-80590",
              "type": "related"
            },
            {
              "destId": "CVE-2026-80725",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0525",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/item/970535bc82f5aecf8b200eb1ce68981fd3accad6ab96e513c496dafcd72ca471",
            "automated": true,
            "contentSha256": "970535bc82f5aecf8b200eb1ce68981fd3accad6ab96e513c496dafcd72ca471",
            "evidenceScore": 7,
            "messageId": "E1x0PrW-000000091lB-1Gw3%40seger.debian.org",
            "originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/7LNUYYHLPJNFIHTE53VJESYY32V4FVRA/",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-11-02T09:47:20Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0525"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T09:47:20Z",
    "dateUpdated": "2026-11-02T09:47:20Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0525"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.