https://linuxsecurity.com/ The central voice for Linux and Open Source security news. en-us 1999-2026 Guardian Digital, Inc. All rights reserved dave@linuxsecurity.com (Dave Wreski) Tue, 06 Oct 2026 16:40:31 +0000 Tue, 06 Oct 2026 16:40:31 +0000 generate_indexes-linuxsecurity-v451-validation-scope-fix.php http://blogs.law.harvard.edu/tech/rss 20 https://linuxsecurity.com/features/top-6-vulnerability-scanning-tools https://linuxsecurity.com/features/top-6-vulnerability-scanning-tools Computer systems, software, applications, and Linux servers are all vulnerable to network security threats. Failure to identify these cybersecurity vulnerabilities, often through modern vulnerability scanning tools, can leave companies exposed Tue, 14 Apr 2026 16:00:44 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-kernel-vulnerability-binderfs-device-creation https://linuxsecurity.com/features/linux-kernel-vulnerability-binderfs-device-creation Linux developers have merged a fix for a Linux kernel vulnerability that can leave Binder device creation writing to memory the kernel has already released. Tue, 06 Oct 2026 03:10:16 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/citrix-netscaler-vulnerability-cve-2026-88779 https://linuxsecurity.com/news/security-vulnerabilities/citrix-netscaler-vulnerability-cve-2026-88779 Citrix has confirmed targeted attacks involving a Citrix NetScaler vulnerability and urged affected customers to update. Tue, 06 Oct 2026 03:00:09 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/openoffice-vulnerability-malicious-documents https://linuxsecurity.com/news/openoffice-vulnerability-malicious-documents Apache is asking OpenOffice users to turn off its Java integration after warning that a malicious document could run code on their computer. Tue, 06 Oct 2026 02:45:12 +0000 LinuxSecurity Editors news news LinuxSecurity.com https://linuxsecurity.com/news/security-projects/apache-thrift-0250-message-memory-limits https://linuxsecurity.com/news/security-projects/apache-thrift-0250-message-memory-limits Apache released Thrift 0.25.0 on Sep 30, 2026 with memory checks for several C++, Java, and Python components. Tue, 06 Oct 2026 02:40:21 +0000 LinuxSecurity Editors news security-projects LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/apache-directory-ldap-api-vulnerabilities https://linuxsecurity.com/news/security-vulnerabilities/apache-directory-ldap-api-vulnerabilities Apache’s release notice on Oct 3, 2026 lists six Apache Directory LDAP API vulnerabilities. Tue, 06 Oct 2026 02:30:19 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/cryptography/openssl-vulnerability-dtls-memory-leak https://linuxsecurity.com/news/cryptography/openssl-vulnerability-dtls-memory-leak OpenSSL issued fixes on Sep 29, 2026 for an OpenSSL vulnerability that can send unrelated program memory to another party during secure connection setup. Tue, 06 Oct 2026 02:20:17 +0000 LinuxSecurity Editors news cryptography LinuxSecurity.com https://linuxsecurity.com/news/security-trends/search-exposure-linux-security https://linuxsecurity.com/news/security-trends/search-exposure-linux-security Search-indexed personal data increases security risk in Linux environments. When email addresses, usernames, phone numbers, and role information are easy to discover through search engines, attackers can use that data for reconnaissance, phishing, credential attacks, and account takeover attempts. Wed, 11 Feb 2026 13:16:40 +0000 LinuxSecurity Editors news security-trends LinuxSecurity.com https://linuxsecurity.com/news/security-trends/internal-vs-external-pen-test https://linuxsecurity.com/news/security-trends/internal-vs-external-pen-test Penetration tests are like fire drills for your network. They expose weak spots, test defenses, and help prevent real damage when threats come knocking. But not all pen tests are the same. Wed, 20 Aug 2025 14:56:25 +0000 LinuxSecurity Editors news security-trends LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/litellm-internal-user-admin-command-execution https://linuxsecurity.com/news/security-vulnerabilities/litellm-internal-user-admin-command-execution LiteLLM has patched a privilege-escalation flaw that can let an authenticated internal user forge an administrative session and reach command-execution features in some AI gateway deployments. Fri, 02 Oct 2026 23:45:01 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/apache-http-server-2-4-69-rce-memory-flaws https://linuxsecurity.com/news/security-vulnerabilities/apache-http-server-2-4-69-rce-memory-flaws Apache released HTTP Server 2.4.69 on October 1, 2026, to fix security faults ranging from unwanted code execution to mishandled web responses. Fri, 02 Oct 2026 23:30:18 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/apisix-api-gateway-security-user-impersonation https://linuxsecurity.com/news/security-vulnerabilities/apisix-api-gateway-security-user-impersonation Apache detailed two Apache APISIX vulnerabilities in notices issued on October 1, 2026. Fri, 02 Oct 2026 23:15:11 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/apisix-denial-of-service-attack-batch-requests https://linuxsecurity.com/news/security-vulnerabilities/apisix-denial-of-service-attack-batch-requests Apache disclosed CVE-2026-94250 on October 1, 2026, warning that public access to a batch-request endpoint can let an attacker exhaust a gateway worker's memory. Fri, 02 Oct 2026 23:00:33 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/apache-camel-server-side-request-forgery-file-read https://linuxsecurity.com/news/security-vulnerabilities/apache-camel-server-side-request-forgery-file-read Apache's September 30, 2026 advisory, CVE-2026-88789, warns that an XML document can make an affected Camel Quarkus application read files or contact internal services. Fri, 02 Oct 2026 22:45:01 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/features/linux-ipsec-queue-bug-device-use-after-free https://linuxsecurity.com/features/linux-ipsec-queue-bug-device-use-after-free Linux developers have proposed an IPsec fix after reproducing a memory error in IP-TFS, a mode that groups and pads encrypted traffic to make traffic patterns harder to infer. Fri, 02 Oct 2026 00:00:21 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-fastrpc-shared-buffer-cleanup-race https://linuxsecurity.com/features/linux-fastrpc-shared-buffer-cleanup-race Linux developers have proposed a FastRPC fix for a race that can leave the kernel using memory after it has been released. Thu, 01 Oct 2026 23:45:20 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-qnx6-filesystem-memory-safety-fixes https://linuxsecurity.com/features/linux-qnx6-filesystem-memory-safety-fixes Linux developers have proposed six fixes for the driver that reads QNX6 filesystems, a disk format associated with the QNX operating system. Thu, 01 Oct 2026 23:35:49 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/lightllm-linux-ai-server-remote-code-execution https://linuxsecurity.com/news/security-vulnerabilities/lightllm-linux-ai-server-remote-code-execution LightLLM, software used to serve AI models, can expose Linux AI servers to remote code execution when operators enable its profiling mode, a tool for measuring performance. Thu, 01 Oct 2026 23:20:11 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/modsecurity-waf-bypass-fixes-linux-servers https://linuxsecurity.com/news/security-vulnerabilities/modsecurity-waf-bypass-fixes-linux-servers ModSecurity has released fixes for a group of web application firewall (WAF) weaknesses that can let dangerous input reach Linux-hosted applications without being inspected as intended. Thu, 01 Oct 2026 22:35:27 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/network-security/secure-linux-networking-for-digital-nomads https://linuxsecurity.com/news/network-security/secure-linux-networking-for-digital-nomads The romanticized image of the digital nomad – a laptop on a sun-drenched balcony – rarely accounts for the actual friction of maintaining a professional development environment on the move. Tue, 26 May 2026 22:12:32 +0000 LinuxSecurity Editors news network-security LinuxSecurity.com https://linuxsecurity.com/features/flatpak-vulnerability-linux-host-files-processes https://linuxsecurity.com/features/flatpak-vulnerability-linux-host-files-processes Flatpak 1.18.4 fixes three vulnerabilities that could let a malicious sandboxed app affect files or processes on its Linux host. Thu, 01 Oct 2026 01:15:32 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-device-driver-rtc-provider-use-after-free https://linuxsecurity.com/features/linux-device-driver-rtc-provider-use-after-free A Linux device driver fix closes a use-after-free risk in the AC100 real-time clock (RTC) driver. Thu, 01 Oct 2026 01:15:45 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-storage-nvmem-double-free-setup https://linuxsecurity.com/features/linux-storage-nvmem-double-free-setup A Linux flash-storage fix prevents a double free, in which the kernel releases the same object twice during device setup. Thu, 01 Oct 2026 01:00:51 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/vendors-products/apache-karaf-flaws-low-privilege-server-takeover https://linuxsecurity.com/news/vendors-products/apache-karaf-flaws-low-privilege-server-takeover Apache released Karaf 4.4.12 on September 27, 2026, to fix three authorization flaws in its Java server runtime. Thu, 01 Oct 2026 00:45:12 +0000 LinuxSecurity Editors news vendors-products LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/shell-quote-command-injection-linux-commands https://linuxsecurity.com/news/security-vulnerabilities/shell-quote-command-injection-linux-commands The maintainers of shell-quote, a JavaScript library for building shell commands, released version 1.11.0 on September 29, 2026, to fix CVE-2026-102422. Wed, 30 Sep 2026 23:00:01 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/linux-perf-filters-reveal-kaslr-base-address https://linuxsecurity.com/news/linux-perf-filters-reveal-kaslr-base-address A newly reported Linux perf filter flaw lets an unprivileged user find where the kernel is loaded on a tested x86-64 configuration. Wed, 30 Sep 2026 00:45:30 +0000 LinuxSecurity Editors news news LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/linux-tracing-fprobe-rcu-use-after-free https://linuxsecurity.com/news/security-vulnerabilities/linux-tracing-fprobe-rcu-use-after-free A proposed Linux tracing patch addresses a race that could free a function probe while its return callback is still using it. Wed, 30 Sep 2026 00:23:17 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/linux-file-truncation-large-folio-data-loss https://linuxsecurity.com/news/security-vulnerabilities/linux-file-truncation-large-folio-data-loss A Linux patch series addresses how file truncation or hole punching could discard valid data beyond the range an application asked to remove. Wed, 30 Sep 2026 00:30:25 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/features/superh-linux-page-fault-double-mmap-lock-unlock https://linuxsecurity.com/features/superh-linux-page-fault-double-mmap-lock-unlock A proposed Linux patch addresses a double unlock in the SuperH architecture’s page-fault handling. Wed, 30 Sep 2026 00:15:45 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-kernel-security-boundaries-review https://linuxsecurity.com/features/linux-kernel-security-boundaries-review A Linux security review can find a check, a lock, or a safe-looking range and still miss the failure. Tue, 29 Sep 2026 23:35:22 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/gitlab-critical-cicd-flaws-code-execution https://linuxsecurity.com/news/security-vulnerabilities/gitlab-critical-cicd-flaws-code-execution Two critical GitLab flaws can turn authenticated continuous integration and delivery (CI/CD) configuration into code execution on self-managed servers. Tue, 29 Sep 2026 06:25:58 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/vendors-products/evaluate-mdr-for-manufacturing https://linuxsecurity.com/news/vendors-products/evaluate-mdr-for-manufacturing Manufacturing security tends to fail at the seam between information technology and operational technology.  Mon, 28 Sep 2026 21:20:50 +0000 LinuxSecurity Editors news vendors-products LinuxSecurity.com https://linuxsecurity.com/news/server-security/enterprise-linux-patch-management https://linuxsecurity.com/news/server-security/enterprise-linux-patch-management Linux is not a standard environment. An enterprise can run many different flavors of Linux on its servers, desktops and specialized systems, each with its own set of software packages, dependencies and updates. Fri, 25 Sep 2026 20:55:41 +0000 LinuxSecurity Editors news server-security LinuxSecurity.com https://linuxsecurity.com/features/crun-container-images-host-microvm-settings https://linuxsecurity.com/features/crun-container-images-host-microvm-settings crun has tightened the boundary between container-controlled configuration and host-controlled microVM behavior. Tue, 29 Sep 2026 03:45:14 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-ebpf-interpreter-races-program-execution https://linuxsecurity.com/features/linux-ebpf-interpreter-races-program-execution Two Linux fixes show how extended Berkeley Packet Filter (eBPF) security can fail when mutable map data crosses into the exec path, where Linux starts a program. Mon, 28 Sep 2026 23:45:51 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-gpu-reset-multi-container-mapping https://linuxsecurity.com/features/linux-gpu-reset-multi-container-mapping A Linux GPU security fix changes how AMD’s Kernel Fusion Driver (KFD) tracks shared mappings when several containers use one device. Mon, 28 Sep 2026 22:45:46 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/runc-1-5-2-linux-cgroup-v2-memory-corruption https://linuxsecurity.com/features/runc-1-5-2-linux-cgroup-v2-memory-corruption runc 1.5.2 adds a workaround for a Linux cgroup v2 memory-corruption bug that can make the privileged container runtime crash unpredictably. Mon, 28 Sep 2026 22:25:24 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-kvm-pkvm-stacks-nested-mmu-lifetime https://linuxsecurity.com/features/linux-kvm-pkvm-stacks-nested-mmu-lifetime A new arm64 Kernel-based Virtual Machine (KVM) merge tightens two ordinary-looking mechanisms with major security weight: page mappings for protected-hypervisor stacks and the lifetime of memory-management state used by nested virtual machines. Mon, 28 Sep 2026 22:00:34 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/ext4-corrupted-inline-data-bounds-check https://linuxsecurity.com/features/ext4-corrupted-inline-data-bounds-check Corrupted ext4 metadata can direct a Linux kernel copy past the inode region that is supposed to contain inline data. Fri, 25 Sep 2026 20:35:36 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-ext4-inline-directory-conversion-race https://linuxsecurity.com/features/linux-ext4-inline-directory-conversion-race A Linux ext4 race can corrupt a directory while the filesystem converts it from inline storage to a regular block. Fri, 25 Sep 2026 20:15:38 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-usb-ip-timer-device-teardown https://linuxsecurity.com/features/linux-usb-ip-timer-device-teardown A Linux USB/IP timer can restart after device teardown has begun, leaving the kernel callback able to use a virtual controller that has already been freed. Fri, 25 Sep 2026 20:15:47 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-io-uring-sqpoll-freed-ring-state https://linuxsecurity.com/features/linux-io-uring-sqpoll-freed-ring-state A Linux io_uring race can let a polling thread release ring state while the CPU that published the work is still using it. Fri, 25 Sep 2026 21:00:49 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/ebpf-security-trampoline-race-freed-programs https://linuxsecurity.com/features/ebpf-security-trampoline-race-freed-programs A Linux eBPF security race can leave generated kernel code pointing at a BPF program after that program’s memory has been released. Fri, 25 Sep 2026 19:45:34 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/cloud-security/kubernetes-security-cross-namespace-pod-cve-2026-2270 https://linuxsecurity.com/news/cloud-security/kubernetes-security-cross-namespace-pod-cve-2026-2270 Kubernetes released fixes on Sep 23, 2026 for a control-plane flaw that could create a pod outside the namespace where a user's permissions applied. CVE-2026-2270 affects kube-controller-manager, the service that runs several controllers responsible for bringing a cluster into line with its declared configuration. A namespace is meant to keep one group's resources separate from another's. Here, a user with permission to change two objects in one namespace could influence a controller that wor... Thu, 24 Sep 2026 22:30:12 +0000 LinuxSecurity Editors news cloud-security LinuxSecurity.com https://linuxsecurity.com/features/linux-cgroup-namespace-race-freed-root-object https://linuxsecurity.com/features/linux-cgroup-namespace-race-freed-root-object A cgroup namespace gives a Linux process a limited view of the control-group hierarchy that organizes workloads and accounts for resources. Thu, 24 Sep 2026 22:30:48 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-ipe-dm-verity-freed-policy-data https://linuxsecurity.com/features/linux-ipe-dm-verity-freed-policy-data Linux integrity checks depend on more than a correct policy or a trusted hash. The kernel must also keep that security state alive for the entire decision. A new patch series reports two places where Integrity Policy Enforcement could continue reading after policy or dm-verity data had been freed. Integrity Policy Enforcement, usually shortened to IPE, is a Linux Security Module that can allow or deny access according to integrity properties. dm-verity supplies read-only block-device verifica... Thu, 24 Sep 2026 22:15:11 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-dvb-usb-driver-disconnect-use-after-free https://linuxsecurity.com/features/linux-dvb-usb-driver-disconnect-use-after-free A Linux device driver can keep an open file alive while freeing the hardware state that file still needs. Thu, 24 Sep 2026 22:15:39 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/linux-console-font-buffer-out-of-bounds-read https://linuxsecurity.com/news/security-vulnerabilities/linux-console-font-buffer-out-of-bounds-read A Linux console font change could leave the framebuffer console with a buffer sized for 256 characters even after a 512-character font was installed. Thu, 24 Sep 2026 22:00:32 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/desktop-security/emacs-security-flaw-could-run-code-from-an-untrusted-file https://linuxsecurity.com/news/desktop-security/emacs-security-flaw-could-run-code-from-an-untrusted-file A September 22 advisory on an Emacs vulnerability says opening a crafted file could run code on the reader's computer, even with the editor's default settings. Wed, 23 Sep 2026 19:45:15 +0000 LinuxSecurity Editors news desktop-security LinuxSecurity.com https://linuxsecurity.com/news/cloud-security/mcp-toolbox-flaw-could-expose-google-service-tokens https://linuxsecurity.com/news/cloud-security/mcp-toolbox-flaw-could-expose-google-service-tokens A September 23 advisory describes a flaw in the Python SDK used with MCP Toolbox: a shared cache could send a Google ID token to a service it was not meant for. Wed, 23 Sep 2026 19:45:44 +0000 LinuxSecurity Editors news cloud-security LinuxSecurity.com