Tag
Linux 7.3 merges kernel patches that improve VRAM management, enhancing performance stability in games when physical VRAM is exceeded through optimized memory eviction and caching.
Developer announces progress on a working main camera driver for Fairphone 6 running PostmarketOS, including color correction improvements and plans for emergency calling verification and future device support.
Linux kernel 7.2 has been released with AI-enriched security fixes and new cache-aware scheduling to improve processing performance.
Con Kolivas proposes the MuQSS CPU scheduler for Linux 7.2, a new scheduling mechanism aimed at improving performance in the Linux kernel.
The team at goonhost.rocks implemented the IPv8 Internet-Draft across the Linux kernel, Musl libc, iproute2, FRRouting, and a Go zone server, then deployed it on a 10-node multi-AS testbed with 112k+ routes. It works in isolated lab conditions but breaks in real-world scenarios.
Blog post detailing the discovery of CVE-2026-53360, a heap out-of-bounds read/write in KVM's SEV-SNP Page State Change handler that lets a malicious guest corrupt host kernel memory. The author discusses the bug, his incorrect fix, the better fix from a duplicate reporter, and provides a CTF challenge.
Alan Maguire led a session at the Linux Storage, Filesystem, Memory-Management, and BPF Summit proposing additions to BTF to store information about inlined functions, enabling kernel tracing of such functions via kprobes.
Tencent's Corvus AI research pipeline discovered SCTPhantom, an 18-year-old use-after-free vulnerability in Linux SCTP dynamic address reconfiguration (ASCONF) that enables local privilege escalation. The article details the discovery, root cause, exploitation chain, and upstream fix.
The gccrs project, creating a Rust frontend for GCC, has made progress toward compiling the Linux kernel, resolving issues in attribute handling, name resolution, and resource management, and reorganizing development milestones.
BPF programs can now send network packets directly from kernel space using the netpoll infrastructure, removing the need for a user-space agent and improving resilience for security monitoring tools like Tetragon.
Qualys and Anthropic disclose CVE-2026-64600, a race condition in the Linux kernel's XFS filesystem that allows local privilege escalation to root, affecting over 16 million systems, with no kernel log output and survival across reboots.
The Linux kernel is set to support $ORIGIN for relocatable binaries via eBPF and binfmt_misc, enabling Nix and similar tools to select interpreters programmatically.
This article details the discovery and exploitation of a Linux kernel 0-day vulnerability in the network scheduler subsystem (red scheduler), turning a limited slab use-after-free into full physical memory read/write, ultimately achieving privilege escalation to root. The vulnerability existed for 2.5 years and was fixed in June 2026.
Linux kernel patches introduce KNOD, a mechanism for in-kernel network packet offloading directly to AMD GPUs, enabling accelerated packet processing without user-space dependencies like ROCm. The code manages GPU queues, JIT compiles per-packet programs, and dispatches work entirely from the kernel.
Researchers at Basis used LLMs to formally verify Linux's nftables firewall, discovering two critical bugs affecting all versions since 2022 and producing a verified implementation free of those bugs.
Linus Torvalds defends the use of AI-powered coding tools in the Linux kernel, telling critics to 'fork it or walk away.' He rejects anti-AI absolutism in the open source community.
Linus Torvalds reaffirms that the Linux kernel project is not anti-AI, stating that AI/LLMs are useful tools and that he will not tolerate attacks on developers who use them.
The article criticizes Anubis, an HTTP proof-of-work proxy meant to block AI scrapers, showing it is trivially bypassed by AI while imposing a regressive burden on human users, especially those with weak devices or non-JavaScript browsers.
GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel stack use-after-free vulnerability affecting all distributions, allowing local privilege escalation and container escape. Detailed exploitation techniques are presented.
A Linux kernel zero-day vulnerability (CVE-2026-43456) rooted in code from 2007 was discovered by Yuki Koike and Kota Toda, rewarded over $80,000 via Google's kernelCTF. The flaw, a type confusion in the net/bonding subsystem, allows reliable privilege escalation within one second.