Tag
Bad Epoll (CVE-2026-46242) is a race-condition use-after-free vulnerability in the Linux kernel's epoll subsystem that allows unprivileged users to escalate to root on both Linux and Android devices. It was reported by Jaeyoung Chung and was missed by Anthropic's Mythos AI.
This blog post explains why PostgreSQL databases are vulnerable to OOM killer and how using strict memory overcommit can prevent catastrophic outages. It also discusses a kernel bug and heuristics for setting the proper overcommit limit.
PostgreSQL 19 introduces kernel asynchronous reads via io_uring, enabling direct asynchronous buffered I/O for improved performance without dedicated worker processes.
A vulnerability in the Linux kernel's FUSE readdir cache (CVE-2026-31694) allows unprivileged local users to escalate to root via an out-of-bounds write. The bug affects many desktop distributions and can be exploited by mounting a FUSE filesystem.
A deep dive into the Linux graphics stack, tracing from GPU triangle drawing through Mesa3D, GLFW, OpenGL, Vulkan, Wayland, and Linux DRM to understand how the system works.
Marcin Juszkiewicz concludes his 11-month experiment using an Ampere Altra AArch64 system as a desktop, citing ongoing PCIe issues that required custom kernel builds and limiting its viability as a daily driver.
A use-after-free vulnerability in the DRM GEM core ioctl DRM_IOCTL_GEM_CHANGE_HANDLE allows unprivileged local users with render node access to escalate to root. The bug was fixed in the Linux kernel mainline in May 2026.
This technical report from TUM details the path a packet takes through the Linux kernel, covering networking internals.
This article delves into the differences between C in the Linux kernel and ordinary userspace C, covering core techniques such as resource management, error handling, concurrency, logging, static analysis, and extensively using GNU C extensions and kernel-specific patterns.
Linux 7.2 kernel merges a performance optimization for anonymous/unnamed pipes, improving throughput by 6-48% and reducing latency by 17-33% by pre-allocating pages outside of mutex lock to avoid contention.
Cloudflare explores using Linux kernel's SOCKMAP infrastructure for TCP socket splicing, which reduces userspace overhead and enables more efficient data forwarding in reverse proxies.
Linux 7.2 has finally removed the deprecated strncpy API after six years and over 360 patches due to its bug-prone nature, replacing it with safer alternatives like strscpy and memcpy.
A new open-source tool called codebase-memory-mcp indexes entire codebases like the Linux kernel in minutes using AST knowledge graphs, achieving massive efficiency gains for AI agents with 99% token reduction and 83% answer quality.
The article explores using mmap to create a magic ring buffer where two contiguous virtual memory ranges map the same physical memory, and tests its compatibility with io_uring's registered buffers, finding that it works as expected.
A detailed walkthrough of the Linux kernel's AF_UNIX garbage collector rewrite, explaining the background, the new graph-based model, and a Use-After-Free bug.
A single faulty character in the Linux kernel introduced a use-after-free vulnerability (CVE-2026-53111) allowing unprivileged users to escalate privileges to root on Debian and Ubuntu systems; the bug has been fixed and backported.
The article details the implementation of automatic buffer management using io_uring's buffer rings in UringMachine, a Ruby gem for asynchronous I/O. It explains how buffer rings enable efficient multishot read/recv operations by allowing the kernel to use application-provided buffers.
This article introduces the binfmt_misc feature introduced in the Linux kernel in 1997. It allows registering rules to hand off binary execution to a specified interpreter. Today, combined with Rosetta on Apple Silicon Macs, it enables efficient x86 container operation, achieving performance close to 70-90% of native.
Browser Use launches a new browser infrastructure service featuring subsecond cold starts, lower cost at $0.02/h, and unlimited scaling, now live for developers.
A heap buffer overflow vulnerability in the Linux kernel's iSCSI target authentication code (BASE64 CHAP decoding) allows unauthenticated remote attackers to overflow fixed-size buffers, potentially leading to code execution. The vulnerability was introduced in a 2022 commit and affects systems with iSCSI target support.