Post #2384047
2026-04-30 20:38 UTC
Debian just released updated kernel packages for Trixie that includes fixes for a whole host of vulnerabilities, including CVE-2026-31431;
https://security-tracker.debian.org/tracker/DSA-6238-1
Installing the updated kernel (6.12.85-1) causes the exploit to fail in our testing, with or without the recommended mitigation.
Proxmox has also had updated kernel packages available since earlier today.
#CopyFail
Replies (1)
-
@mejofi@ngmx.com 2026-05-01 17:48
Updated kernel packages are now available for Debian Bullseye as well, which means that we are now just waiting for Bookworm updates to drop. https://packages.debian.org/bullseye/linux-image-cloud-amd64 It's not yet visible as I am posting this, but you want version 5.10.251-3 of the 'linux-image-cloud-amd64' or 'linux-image-amd64' package, which will give you 5.10.0-41; $ uname -r 5.10.0-41-cloud-amd64 The changelog is not yet available either, it seems, either via 'apt-get changelog' or the web interface at 'packages.debian.org', so I am including the local output here for reference in case it's useful to anyone else. #CopyFail