Debian Linux Kernel Multiple Vulnerabilities

Multiple vulnerabilities were identified in Debian Linux Kernel. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege and sensitive information disclosure on the targeted system.

Note: 

CVE-2026-31431 is being exploited in the wild. Copy Fail (CVE-2026-31431) is a logic bug in the Linux kernel's authencesn cryptographic template. It lets an unprivileged local user trigger a deterministic, controlled 4-byte write into the page cache of any readable file on the system. A single 732-byte Python script can edit a setuid binary and obtain root on essentially all Linux distributions shipped since 2017.

CVE-2026-43284 and CVE-2026-43500 (commonly known as "Dirty Frag") are being scattered exploited. If exploited, these vulnerability could allow a local user with low privileges to gain elevated system (root) permissions.

Proof of Concept exploit code is publicly available for CVE-2026-46333. This vulnerability is a Linux kernel race condition during process exit that allows a local unprivileged user to read root-only sensitive files. If exploited, it may disclose data such as SSH host private keys or /etc/shadow contents.

[Updated on 2026-05-11]

Updated System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.

[Updated on 2026-05-12]

Updated Description.
 

[Updated on 2026-05-18]

Updated System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.

[Updated on 2026-05-22]

Updated Description.

[Updated on 2026-05-26]

Updated System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.

[Updated on 2026-05-29]

Updated System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.