https://shadowfish.night-tower.net/tags/trixie/Recent content in Trixie on ShadowfishHugo -- gohugo.ioen-us© 2026 Creeping depths of the deepSun, 02 Aug 2026 09:17:49 +0200https://shadowfish.night-tower.net/post/debian-13-kernel-6-12-cve-update-guide/Sun, 02 Aug 2026 09:17:49 +0200https://shadowfish.night-tower.net/post/debian-13-kernel-6-12-cve-update-guide/<div class="my-6 rounded-xl border border-neutral-200 bg-neutral-50/60 p-6 shadow-sm transition-colors dark:border-neutral-700/80 dark:bg-neutral-800/50"> <div class="mb-4 flex items-center justify-between gap-3 border-b border-neutral-200/80 pb-3 dark:border-neutral-700/80"> <div class="flex items-center gap-2.5 font-semibold text-neutral-900 dark:text-neutral-100"> <span class="text-primary-600 dark:text-primary-400 flex items-center"> </span> <span class="text-lg tracking-tight">The 30-Second Maintenance Promise</span> </div> <span class="rounded bg-neutral-200/80 px-2.5 py-0.5 text-xs font-medium text-neutral-700 dark:bg-neutral-700 dark:text-neutral-300"> TL;DR </span> </div> <div class="prose dark:prose-invert max-w-none text-neutral-700 dark:text-neutral-300"><p><strong>Worried that updating your Debian 13 client will take all weekend?</strong></p> <p>Keeping your workstation or server patched is literally a <strong>2-command affair</strong>:</p> <div class="highlight-wrapper"><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">sudo apt update <span class="o">&amp;&amp;</span> sudo apt install linux-image-amd64 <span class="o">&amp;&amp;</span> sudo reboot</span></span></code></pre></div></div> <p>That&rsquo;s it! Read on to learn how to check your exact kernel version and verify your system against official security tracker records in under two minutes.</p> <p><em>Lazy sysadmin tip:</em> Want your machine to fetch security patches automatically while you sleep? Check out the official guide on setting up <strong><a href="https://wiki.debian.org/UnattendedUpgrades" target="_blank" rel="noreferrer">Debian UnattendedUpgrades</a></strong>.</p> </div> </div> <p>It is a quiet Sunday morning. Your <a href="https://shadowfish.night-tower.net/post/night-tower-homelab-architecture/" >Night-Tower homelab</a> is idling gracefully, CPU temperatures are at a cool 32°C, and you are admiring a pristine 214-day uptime counter on your primary Debian host. You take a triumphant sip of warm coffee, open your browser, and glance at the security security tracker.</p> <p>Then it hits you like a rogue DMA packet: a flurry of <strong>CVE security fixes</strong> just dropped for <strong>Debian 13 (Trixie)</strong> in kernel package <code>linux-image-6.12.100+deb13-amd64</code>.</p> <div class="highlight-wrapper"><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">[ ALERT ] CVE-2026-XXXX: Local Privilege Escalation via obscure subsystem </span></span><span class="line"><span class="cl">[ ALERT ] CVE-2026-YYYY: Out-of-bounds memory write when handling malformed packets </span></span><span class="line"><span class="cl">[ STATUS ] Fixed in linux version 6.12.100+deb13-1</span></span></code></pre></div></div> <p>Suddenly, your beloved uptime counter feels less like a badge of honor and more like an open invitation to cosmic chaos. But don&rsquo;t panic! Upgrading your kernel and double-checking your security status against Debian&rsquo;s official security tracker is quick, painless, and completely survival-approved.</p> <p>Here is your ultra-simple, funny survival guide to staying secure on Debian 13 Trixie.</p>