https://linuxsecurity.com/ The central voice for Linux and Open Source security news. en-us 1999-2026 Guardian Digital, Inc. All rights reserved dave@linuxsecurity.com (Dave Wreski) Tue, 06 Oct 2026 16:40:31 +0000 Tue, 06 Oct 2026 16:40:31 +0000 generate_indexes-linuxsecurity-v451-validation-scope-fix.php http://blogs.law.harvard.edu/tech/rss 20 https://linuxsecurity.com/features/top-6-vulnerability-scanning-tools https://linuxsecurity.com/features/top-6-vulnerability-scanning-tools Computer systems, software, applications, and Linux servers are all vulnerable to network security threats. Failure to identify these cybersecurity vulnerabilities, often through modern vulnerability scanning tools, can leave companies exposed Tue, 14 Apr 2026 16:00:44 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-kernel-vulnerability-binderfs-device-creation https://linuxsecurity.com/features/linux-kernel-vulnerability-binderfs-device-creation Linux developers have merged a fix for a Linux kernel vulnerability that can leave Binder device creation writing to memory the kernel has already released. Tue, 06 Oct 2026 03:10:16 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-ipsec-queue-bug-device-use-after-free https://linuxsecurity.com/features/linux-ipsec-queue-bug-device-use-after-free Linux developers have proposed an IPsec fix after reproducing a memory error in IP-TFS, a mode that groups and pads encrypted traffic to make traffic patterns harder to infer. Fri, 02 Oct 2026 00:00:21 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-fastrpc-shared-buffer-cleanup-race https://linuxsecurity.com/features/linux-fastrpc-shared-buffer-cleanup-race Linux developers have proposed a FastRPC fix for a race that can leave the kernel using memory after it has been released. Thu, 01 Oct 2026 23:45:20 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-qnx6-filesystem-memory-safety-fixes https://linuxsecurity.com/features/linux-qnx6-filesystem-memory-safety-fixes Linux developers have proposed six fixes for the driver that reads QNX6 filesystems, a disk format associated with the QNX operating system. Thu, 01 Oct 2026 23:35:49 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/flatpak-vulnerability-linux-host-files-processes https://linuxsecurity.com/features/flatpak-vulnerability-linux-host-files-processes Flatpak 1.18.4 fixes three vulnerabilities that could let a malicious sandboxed app affect files or processes on its Linux host. Thu, 01 Oct 2026 01:15:32 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-device-driver-rtc-provider-use-after-free https://linuxsecurity.com/features/linux-device-driver-rtc-provider-use-after-free A Linux device driver fix closes a use-after-free risk in the AC100 real-time clock (RTC) driver. Thu, 01 Oct 2026 01:15:45 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-storage-nvmem-double-free-setup https://linuxsecurity.com/features/linux-storage-nvmem-double-free-setup A Linux flash-storage fix prevents a double free, in which the kernel releases the same object twice during device setup. Thu, 01 Oct 2026 01:00:51 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/superh-linux-page-fault-double-mmap-lock-unlock https://linuxsecurity.com/features/superh-linux-page-fault-double-mmap-lock-unlock A proposed Linux patch addresses a double unlock in the SuperH architecture’s page-fault handling. Wed, 30 Sep 2026 00:15:45 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-kernel-security-boundaries-review https://linuxsecurity.com/features/linux-kernel-security-boundaries-review A Linux security review can find a check, a lock, or a safe-looking range and still miss the failure. Tue, 29 Sep 2026 23:35:22 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/crun-container-images-host-microvm-settings https://linuxsecurity.com/features/crun-container-images-host-microvm-settings crun has tightened the boundary between container-controlled configuration and host-controlled microVM behavior. Tue, 29 Sep 2026 03:45:14 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-ebpf-interpreter-races-program-execution https://linuxsecurity.com/features/linux-ebpf-interpreter-races-program-execution Two Linux fixes show how extended Berkeley Packet Filter (eBPF) security can fail when mutable map data crosses into the exec path, where Linux starts a program. Mon, 28 Sep 2026 23:45:51 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-gpu-reset-multi-container-mapping https://linuxsecurity.com/features/linux-gpu-reset-multi-container-mapping A Linux GPU security fix changes how AMD’s Kernel Fusion Driver (KFD) tracks shared mappings when several containers use one device. Mon, 28 Sep 2026 22:45:46 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/runc-1-5-2-linux-cgroup-v2-memory-corruption https://linuxsecurity.com/features/runc-1-5-2-linux-cgroup-v2-memory-corruption runc 1.5.2 adds a workaround for a Linux cgroup v2 memory-corruption bug that can make the privileged container runtime crash unpredictably. Mon, 28 Sep 2026 22:25:24 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-kvm-pkvm-stacks-nested-mmu-lifetime https://linuxsecurity.com/features/linux-kvm-pkvm-stacks-nested-mmu-lifetime A new arm64 Kernel-based Virtual Machine (KVM) merge tightens two ordinary-looking mechanisms with major security weight: page mappings for protected-hypervisor stacks and the lifetime of memory-management state used by nested virtual machines. Mon, 28 Sep 2026 22:00:34 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/ext4-corrupted-inline-data-bounds-check https://linuxsecurity.com/features/ext4-corrupted-inline-data-bounds-check Corrupted ext4 metadata can direct a Linux kernel copy past the inode region that is supposed to contain inline data. Fri, 25 Sep 2026 20:35:36 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-ext4-inline-directory-conversion-race https://linuxsecurity.com/features/linux-ext4-inline-directory-conversion-race A Linux ext4 race can corrupt a directory while the filesystem converts it from inline storage to a regular block. Fri, 25 Sep 2026 20:15:38 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-usb-ip-timer-device-teardown https://linuxsecurity.com/features/linux-usb-ip-timer-device-teardown A Linux USB/IP timer can restart after device teardown has begun, leaving the kernel callback able to use a virtual controller that has already been freed. Fri, 25 Sep 2026 20:15:47 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-io-uring-sqpoll-freed-ring-state https://linuxsecurity.com/features/linux-io-uring-sqpoll-freed-ring-state A Linux io_uring race can let a polling thread release ring state while the CPU that published the work is still using it. Fri, 25 Sep 2026 21:00:49 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/ebpf-security-trampoline-race-freed-programs https://linuxsecurity.com/features/ebpf-security-trampoline-race-freed-programs A Linux eBPF security race can leave generated kernel code pointing at a BPF program after that program’s memory has been released. Fri, 25 Sep 2026 19:45:34 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-cgroup-namespace-race-freed-root-object https://linuxsecurity.com/features/linux-cgroup-namespace-race-freed-root-object A cgroup namespace gives a Linux process a limited view of the control-group hierarchy that organizes workloads and accounts for resources. Thu, 24 Sep 2026 22:30:48 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-ipe-dm-verity-freed-policy-data https://linuxsecurity.com/features/linux-ipe-dm-verity-freed-policy-data Linux integrity checks depend on more than a correct policy or a trusted hash. The kernel must also keep that security state alive for the entire decision. A new patch series reports two places where Integrity Policy Enforcement could continue reading after policy or dm-verity data had been freed. Integrity Policy Enforcement, usually shortened to IPE, is a Linux Security Module that can allow or deny access according to integrity properties. dm-verity supplies read-only block-device verifica... Thu, 24 Sep 2026 22:15:11 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-dvb-usb-driver-disconnect-use-after-free https://linuxsecurity.com/features/linux-dvb-usb-driver-disconnect-use-after-free A Linux device driver can keep an open file alive while freeing the hardware state that file still needs. Thu, 24 Sep 2026 22:15:39 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-hid-flaw-could-leak-kernel-memory-through-input-events https://linuxsecurity.com/features/linux-hid-flaw-could-leak-kernel-memory-through-input-events A newly merged Linux HID fix addresses a Wacom input-device path that could read beyond a short report and pass a value to local software. Wed, 23 Sep 2026 19:30:07 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-damon-page-table-bug-could-corrupt-arm64-system-memory https://linuxsecurity.com/features/linux-damon-page-table-bug-could-corrupt-arm64-system-memory Linux DAMON, the kernel's Data Access Monitor, samples memory use to show which pages a workload touches. Wed, 23 Sep 2026 19:25:32 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/ph4ntxm-linux-disposable-identity https://linuxsecurity.com/features/ph4ntxm-linux-disposable-identity A live Linux distribution runs from removable media, usually a USB drive, without requiring a permanent installation. Wed, 23 Sep 2026 00:25:57 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/crun-gpu-renderer-container-isolation https://linuxsecurity.com/features/crun-gpu-renderer-container-isolation The crun container runtime has changed how GPU-enabled workloads launch a key graphics helper. Tue, 22 Sep 2026 05:15:44 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-dma-teardown-use-after-free https://linuxsecurity.com/features/linux-dma-teardown-use-after-free Linux developers have fixed two memory-safety bugs in the subsystem that lets hardware move data without constant help from the CPU. Tue, 22 Sep 2026 04:45:18 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-input-kernel-stack-data-leak https://linuxsecurity.com/features/linux-input-kernel-stack-data-leak Linux developers have fixed two input-system bugs that could expose small pieces of leftover kernel memory to a local program. Tue, 22 Sep 2026 04:35:31 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/selinux-nested-overlayfs-mprotect-checks https://linuxsecurity.com/features/selinux-nested-overlayfs-mprotect-checks Linux developers have fixed an SELinux flaw that could allow a program to make a mapped file executable after SELinux had blocked direct execution. Mon, 21 Sep 2026 23:00:37 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-security-roundup-september-18-2026 https://linuxsecurity.com/features/linux-security-roundup-september-18-2026 Most administrators do not think about BIND, browser engines, or cloud kernels until one of them fails. Fri, 18 Sep 2026 21:00:22 +0000 LinuxSecurity Editors features linuxsecurity-com-must-read-articles LinuxSecurity.com https://linuxsecurity.com/features/linux-packet-metadata-stale-header-offsets https://linuxsecurity.com/features/linux-packet-metadata-stale-header-offsets Linux packet metadata could keep pointing to network headers after the underlying packet had been rebuilt without them. Fri, 18 Sep 2026 20:15:46 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-ebpf-security-flaw-out-of-bounds-access https://linuxsecurity.com/features/linux-ebpf-security-flaw-out-of-bounds-access A Linux eBPF security flaw could cause the kernel to approve a program using an incorrect understanding of the values it would process. Fri, 18 Sep 2026 20:00:06 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/powerpc-kvm-nested-guest-use-after-free https://linuxsecurity.com/features/powerpc-kvm-nested-guest-use-after-free A PowerPC KVM use-after-free could leave the Linux host kernel accessing a nested-guest object after another virtual CPU caused that object to be removed and freed. The upstream Linux correction adds a missing reference that keeps the object alive while KVM invalidates cached address translations. Thu, 17 Sep 2026 20:45:39 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-path-validation-symlink-race https://linuxsecurity.com/features/linux-path-validation-symlink-race A Linux path can be valid when a program checks it and point somewhere else when the program uses it. That gap creates a time-of-check to time-of-use, or TOCTOU race condition, whenever an untrusted process can change part of the directory tree between two separate lookups. Thu, 17 Sep 2026 07:58:18 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-file-permissions-root-trust-boundary https://linuxsecurity.com/features/linux-file-permissions-root-trust-boundary Linux file permissions are usually introduced as a way to decide who may read, write, or execute a file. On a production server, they do something more important: they help decide which lower-privilege users can influence work later performed by root or another privileged service. Thu, 17 Sep 2026 01:15:41 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/malicious-container-image-crun-linux-host https://linuxsecurity.com/features/malicious-container-image-crun-linux-host Container security can fail before a workload fully enters its root filesystem, the private file tree the container is meant to see. Wed, 16 Sep 2026 10:31:07 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-smb-ownership-input-trust-boundaries https://linuxsecurity.com/features/linux-smb-ownership-input-trust-boundaries SMB, or Server Message Block, lets Linux systems access files shared over a network. Wed, 16 Sep 2026 10:22:20 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-huge-page-reclaim-data-loss https://linuxsecurity.com/features/linux-huge-page-reclaim-data-loss Transparent huge pages let Linux manage memory in larger blocks for better performance. Wed, 16 Sep 2026 10:16:05 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/sleepable-ebpf-btf-metadata-lifetime https://linuxsecurity.com/features/sleepable-ebpf-btf-metadata-lifetime eBPF lets verified programs run inside the Linux kernel. Linux eBPF security depends on supporting data remaining available for as long as those programs can use it. Wed, 16 Sep 2026 10:07:46 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-encryption-strategy https://linuxsecurity.com/features/linux-encryption-strategy In today’s world, almost every part of our lives is directly or indirectly linked to the Internet. As cyberattacks in network security grow more advanced, our sensitive data faces more risk. Knowing how to protect your online identity is now a necessity. Mon, 27 Feb 2023 17:00:13 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-virtualization-vhost-memory-exhaustion https://linuxsecurity.com/features/linux-virtualization-vhost-memory-exhaustion Linux virtualization lets a physical host run guest virtual machines. A fix in vhost, the Linux component that helps those guests exchange data with virtual devices, limits memory consumed by repeated requests for a missing memory mapping. Fri, 11 Sep 2026 23:10:32 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-tls-traffic-confidential-vm-attestation https://linuxsecurity.com/features/linux-tls-traffic-confidential-vm-attestation Confidential computing can protect a virtual machine’s memory from the host that runs it. A remote client still needs to check that its connection reaches the protected machine. Transport Layer Security, or TLS, encrypts the connection and checks the service’s identity, but does not by itself verify the machine’s software environment. Fri, 11 Sep 2026 22:15:29 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-close-file-descriptors-filesystem-stall https://linuxsecurity.com/features/linux-close-file-descriptors-filesystem-stall A file descriptor is the numbered handle a running program uses to access an open file or similar resource. Linux can mark it to close automatically when the program replaces itself through exec(). That cleanup can involve waiting for a filesystem, which makes its timing important. Thu, 10 Sep 2026 19:30:12 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-sandbox-freed-parent-directory https://linuxsecurity.com/features/linux-sandbox-freed-parent-directory A Linux sandbox restricts which files a program can access. Landlock, a kernel facility that lets programs apply those restrictions to themselves, had a bug in the code checking file locations. A concurrent directory move could leave the check reading memory that had already been released. Thu, 10 Sep 2026 19:10:40 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-kernel-testing-maccconc-race-conditions https://linuxsecurity.com/features/linux-kernel-testing-maccconc-race-conditions Linux kernel testing can miss a bug when it depends on two tasks reaching the same data in an unusual order. These independently running tasks are called threads. A race condition occurs when their timing changes whether the code works correctly, which can make a failure difficult to reproduce. Google Project Zero published MAccConc on Sep 8, 2026 as a prototype that changes the timing itself. Its name is short for Memory Access Concurrency. The tool traces selected Linux kernel memory access... Wed, 09 Sep 2026 20:30:32 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-privilege-escalation-rds-cleanup-bug https://linuxsecurity.com/features/linux-privilege-escalation-rds-cleanup-bug A new Linux privilege escalation exploit shows how a cleanup mistake in Reliable Datagram Sockets, or RDS, can give a local user root access, meaning administrator control of the machine. RDS is a Linux kernel networking subsystem designed for low-latency communication between machines and processes. Wed, 09 Sep 2026 20:10:12 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/ipv6-security-route-listing-freed-kernel-memory https://linuxsecurity.com/features/ipv6-security-route-listing-freed-kernel-memory Listing network routes should tell administrators where traffic will go. An IPv6 security report instead shows Linux accessing a freed record used to keep track of that listing. A list of active readers still points to the record after cleanup releases it, so a later route change can reach invalid memory and crash the kernel. Wed, 09 Sep 2026 19:45:29 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-multicast-tables-cgroup-memory-limits https://linuxsecurity.com/features/linux-multicast-tables-cgroup-memory-limits A Linux cgroup, or control group, limits how much memory a group of processes can use. Yet its counters can look normal while those processes cause the host kernel, the core of the operating system, to use memory that is not counted against their limit. A networking patch posted on Sep 7, 2026 shows one way this can happen with IPv6 multicast routing, which sends network traffic to a group of recipients. The test creates routing tables inside namespaces: separate views of user identities and ... Tue, 08 Sep 2026 19:15:39 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-rpc-file-network-namespace-use-after-free https://linuxsecurity.com/features/linux-rpc-file-network-namespace-use-after-free A program can keep a Linux file open even after the separate networking environment behind it has started shutting down. That environment is called a network namespace. A SUNRPC patch posted on Sep 7, 2026 describes that exact failure in the /proc/net/rpc/use-gss-proxy control used by Linux remote procedure call (RPC) servers, including Network File System (NFS), which lets computers access files over a network. Tue, 08 Sep 2026 19:00:17 +0000 LinuxSecurity Editors features features LinuxSecurity.com