Changeflow GovPing Data Privacy & Cybersecurity Debian LTS Linux Kernel Vulnerabilities Affecti...
Priority review Notice Amended Final

Debian LTS Linux Kernel Vulnerabilities Affecting Confidentiality, Denial of Service, Privilege Escalation

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published March 20th, 2026
Detected March 20th, 2026
Email

Summary

CERT-FR has issued an advisory regarding multiple vulnerabilities discovered in the Linux kernel used in Debian LTS systems. These vulnerabilities could lead to data confidentiality breaches, denial of service, and privilege escalation. Users are advised to consult Debian's security bulletins for patch information.

View original document View source feed page

What changed

CERT-FR has issued an advisory (CERTFR-2026-AVI-0328) detailing multiple vulnerabilities in the Linux kernel for Debian LTS (bullseye) versions prior to 5.10.251-1 and 6.1.164-1~deb11u1. These vulnerabilities, identified by various CVEs including CVE-2022-50516 and CVE-2023-53424, pose risks of data confidentiality breaches, denial of service, and privilege escalation for affected systems.

Organizations utilizing Debian LTS bullseye are strongly urged to review the referenced Debian security bulletins (DLA-4498-1 and DLA-4499-1) and apply the necessary patches promptly. Failure to do so could expose systems to significant security risks, including unauthorized access and service disruption. The advisory provides links to the specific Debian announcements and CVE details for further technical information.

What to do next

  1. Review Debian LTS security bulletins DLA-4498-1 and DLA-4499-1.
  2. Apply available kernel patches to Debian LTS bullseye systems.
  3. Consult CVE details for specific vulnerabilities to assess impact.

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 20 mars 2026 N° CERTFR-2026-AVI-0328 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans le noyau Linux de Debian LTS

Gestion du document

| Référence | CERTFR-2026-AVI-0328 |
| Titre | Multiples vulnérabilités dans le noyau Linux de Debian LTS |
| Date de la première version | 20 mars 2026 |
| Date de la dernière version | 20 mars 2026 |
| Source(s) | Bulletin de sécurité Debian LTS DLA-4498-1 du 13 mars 2026
Bulletin de sécurité Debian LTS DLA-4499-1 du 13 mars 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risques

  • Atteinte à la confidentialité des données
  • Déni de service
  • Élévation de privilèges

Systèmes affectés

  • Debian LTS bullseye versions antérieures à 5.10.251-1
  • Debian LTS bullseye versions antérieures à 6.1.164-1~deb11u1

Résumé

De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un déni de service.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 20 mars 2026 Version initiale

Named provisions

Risques Systèmes affectés Résumé Solutions Documentation

Related changes

Favicon for www.cert.ssi.gouv.fr VMware Products Vulnerabilities Advisory
Priority review Mar 20, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr IBM Products Vulnerabilities
Priority review Mar 20, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple vulnerabilities in Elastic products
Priority review Mar 20, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for changeflow.com Bluefin Payment Systems Vaultless Tokenization and Encryption System
Routine Mar 23, 2026 • ChangeBridge: EPO Bulletin - Business Methods (G06Q) • Banking & Finance
Favicon for changeflow.com USPTO Patent Application for Digital Identification Creation and Use
Routine Mar 23, 2026 • ChangeBridge: Patent Apps - Business Methods (G06Q) • Banking & Finance
Favicon for changeflow.com USPTO Machine Learning DNS Monitoring Patent Application
Routine Mar 23, 2026 • ChangeBridge: Patent Apps - Business Methods (G06Q) • Banking & Finance

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
CERT-FR
Published
March 20th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0328

Who this affects

Applies to
Employers Technology companies
Industry sector
5112 Software & Technology
Activity scope
System Security Vulnerability Management
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy System Security

Browse Categories

Agriculture & Food Safety 61 Banking & Finance 228 Consumer Protection 40 Courts & Legal 312 Data Privacy & Cybersecurity 62 Defense & National Security 48 Education 20 Energy 104 Environment 83 Government & Legislation 258 Healthcare 131 Housing 15 Immigration 9 Insurance 55 Labor & Employment 110 Legal & Courts 1 Pharma & Drug Safety 95 Securities & Markets 77 Tax 62 Telecom & Technology 46 Trade & Sanctions 124 Transportation 56

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.