News · via Ubuntu Security
USN-8729-3: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
Linux
Coverage tagged "Linux".
News · via Ubuntu Security
USN-8761-3: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
News · via Ubuntu Security
USN-8730-4: Linux kernel vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; -…
News · via Sonar
Vortex vs AGENTS.md: when to use which
These two things get pitted against each other, and it is a false fight. AGENTS.md and Sonar Vortex solve different problems at different layers of the loop. AGENTS.md is a static file of team…
News · via Kaspersky Securelist
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
Executive summary In April 2026, we at Kaspersky’s Global Emergency Response Team (GERT) responded to a security incident at a manufacturing organization in the Middle East. The threat actor obtained…
News · via SecurityWeek
Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities
Attackers could exploit the flaws to cause denial-of-service conditions, disclose memory, or modify memory.
News · via arXiv cs.CR
TPM-Attest: Hardware-Rooted Integrity Attestation as a Kernel-Level Anti-Cheat Alternative for Linux
arXiv:2609.20909v1 Announce Type: new Abstract: Multiplayer PC gaming on Linux faces a structural problem: the anti-cheat systems that publishers require operate as proprietary Ring 0 kernel modules…
News · via oss-security
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Posted by Roman Fiedler on Sep 20 Well, splitting the kernel in per module packages may have other advantages, e.g. less data transferred due to using selected small packages only, but I don't know…
News · via Security Affairs
U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog. The U.S.
News · via Security Affairs
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Gray Rabbits and the Tale of a One-Click…
News · via oss-security
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Posted by Greg Dahlman on Sep 19 I may be missing something but I do see a path that may be clean without inventing new package manager features or relying on brittle, text-based version strings. The…
News · via Synacktiv
Exploiter la RBCD en environnements cross-domain & cross-forest : partie 2
Le support de la délégation Kerberos côté Linux a été étendu afin de pouvoir emprunter une identité arbitraire au sein d'une même forêt. Cette identité peut être ensuite utilisée pour accéder à une…
News · via Synacktiv
Survivre à la déferlante de LPE Linux : la défense en profondeur n'est pas morte !
Maintenant que l'IA aide à la recherche de vulnérabilités et au patch diffing de kernel, faisant sauter les embargos de responsible disclosure, la période est pour le moins intense pour les…
News · via Synacktiv
Dites bonjour à Pike!
Dans cet article, nous allons présenter Pike, un agent LLM expérimental capable de générer et d'analyser des traces d'exécution de programmes Linux. Nous montrerons qu'avec une architecture simple…
News · via Synacktiv
mitmproxy for fun and profit: Interception et analyse de flux applicatifs
Une connaissance fine des protocoles utilisés par les applications s’avère être un prérequis nécessaire pour étudier la sécurité des applications. Lors de ces dernières, nous avons été amenés à…
News · via The Hacker News
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence…
News · via oss-security
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Posted by SOFIA ETCHEPARE DARONCO on Sep 18 FWIW PPPoE is quite ubiquitous, though normally for gateway ISP communication rather than anything in end user machines.
News · via The Hacker News
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a machine. Kernel maintainers have fixed all…
News · via Chrome Releases
Chrome Dev for Desktop Update
The Dev channel has been updated to 156.0.8063.3 for Windows, Mac and Linux. A partial list of changes is available in the Git log. Interested in switching release channels?
News · via CISA
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-39964 Linux Kernel Race Condition Vulnerability…