Critical Vulnerability in Linux Package Affecting Debian Systems

linux Updated 22 Oct 2026

Summary

25/07/2026

Disclosed on

N/A

Severity

No i

Fix available

Unrated

Severity

Not published

CVSS Score

DEBIAN-CVE-2026-64476: ... Affects linux versions 6.1.106-1 – 7.2~rc3-1~exp1. No fix is published. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or Browse

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats

SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml

Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile

Javascript package-lock.json · yarn.lock · pnpm-lock.yaml

PHP composer.lock

Python poetry.lock · requirements.txt · Pipfile.lock

Go go.mod

Rust Cargo.lock

Ruby Gemfile.lock

Dart pubspec.lock

C/C++ conan.lock

Elixir mix.lock

Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Background

The Linux package is a core component of Debian operating systems, providing essential functionalities for system operations, hardware management, and user interactions. It is widely used across various Debian distributions, including Bookworm, Trixie, and Forky. This package is pivotal for system stability and security, making it crucial to address any vulnerabilities that may arise.

Vulnerability Detail

CVE-2026-64476 is a critical vulnerability identified in the Linux package that affects multiple Debian distributions. The vulnerability originates from a flaw in the kernel that could potentially allow unauthorized access or control over system resources. If exploited, it could lead to severe ramifications, including data breaches, system crashes, or unauthorized privilege escalation. The vulnerability is present in all versions prior to the fixed version 6.12.96-1 for Debian Trixie, while Bookworm and Forky are still vulnerable without a patch.

How To Fix

No fixed version is published for this vulnerability.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Workaround

Currently, there are no specific workarounds provided for this vulnerability. Users are advised to limit access to affected systems and monitor for any suspicious activities until a patch is available.

Conclusion

CVE-2026-64476 represents a significant risk for users of the Linux package across various Debian distributions. It is essential to update to the patched version where available and remain vigilant for updates regarding the other distributions. Utilizing tools like Vulert can help in monitoring vulnerabilities effectively.

See every vulnerability recorded for linux →