Debian's latest kernel update, managed by Freexian, includes a significant 597 CVEs in its 5.10.272-1 version, while the trixie stable kernel contains 273 CVEs. AlmaLinux, Oracle Linux, and others have also released important FreeIPA updates addressing multiple critical vulnerabilities, including an unauthenticated LDAP client issue that allows admin rights. Additionally, a high-severity guest-to-host VM escape vulnerability, dubbed "PwnEscape," is currently in testing for AlmaLinux but has not yet been released to production. Various Linux distributions, including Fedora, RHEL, and SUSE, have issued routine security updates, with a focus on addressing security flaws and maintaining system integrity

Linux Security Roundup: Debian 597 CVE Kernel FreeIPA PwnEscape VM Escape

Debian's Freexian-managed kernel advisory for bullseye packs a staggering 597 CVEs into its 5.10.272-1 update, with trixie's stable kernel still carrying 273. AlmaLinux, Oracle Linux, and others shipped overlapping Critical FreeIPA fixes covering eight CVEs each, including an unauthenticated LDAP client that can grant itself administrator rights. A genuine guest-to-host VM escape, CVE-2026-99999 "PwnEscape," is already sitting in testing for AlmaLinux 8, 9, and 10 but hasn't hit production yet. Patch priorities include the FreeIPA directory fixes and the Freexian kernel, while Debian, Fedora, Rocky, RHEL, SUSE, Slackware, and Oracle all pushed their usual batch of routine updates you can apply through your familiar package manager.

Linux Security Roundup: Debian 597 CVE Kernel FreeIPA PwnEscape VM Escape @ Linux Compatible