Debian trixie: update the Linux kernel to address multiple vulnerabilities

Debian DSA-6628-1 reports multiple vulnerabilities in the Linux kernel on Debian trixie. Administrators can check the installed package version and upgrade to the fixed version as recommended by Debian.

Overview and technical details

The Linux kernel is the operating system core; it manages hardware resources and provides services to processes. Debian says the vulnerabilities in this advisory could lead to privilege escalation, denial of service, or information disclosure.

Affected systems

System checks

1. Check the installed version of the linux package:

   Copy commands

   dpkg-query -W -f='${Version}\n' linux

   Version 6.12.107-1 needs an update; the fixed version for trixie is 6.12.117-1.

2. Compare the installed version with the fixed version:

   Copy commands

   dpkg --compare-versions "$(dpkg-query -W -f='${Version}' linux)" lt 6.12.117-1

   Exit code 0 means the installed version is lower than 6.12.117-1 and needs an update. Any other exit code means the version is not lower than this level.

3. Check the linux version available from configured APT sources:

   Copy commands

   apt-cache policy linux

   Review the candidate version; the fixed version specified for trixie is 6.12.117-1.

Remediation and mitigation

1. Upgrade the linux package on Debian trixie to version 6.12.117-1. Prioritize systems running version 6.12.107-1.

References

• Debian DSA-6628-1