Tag
The team at goonhost.rocks implemented the IPv8 Internet-Draft across the Linux kernel, Musl libc, iproute2, FRRouting, and a Go zone server, then deployed it on a 10-node multi-AS testbed with 112k+ routes. It works in isolated lab conditions but breaks in real-world scenarios.
Blog post detailing the discovery of CVE-2026-53360, a heap out-of-bounds read/write in KVM's SEV-SNP Page State Change handler that lets a malicious guest corrupt host kernel memory. The author discusses the bug, his incorrect fix, the better fix from a duplicate reporter, and provides a CTF challenge.
Alan Maguire led a session at the Linux Storage, Filesystem, Memory-Management, and BPF Summit proposing additions to BTF to store information about inlined functions, enabling kernel tracing of such functions via kprobes.
Tencent's Corvus AI research pipeline discovered SCTPhantom, an 18-year-old use-after-free vulnerability in Linux SCTP dynamic address reconfiguration (ASCONF) that enables local privilege escalation. The article details the discovery, root cause, exploitation chain, and upstream fix.
The gccrs project, creating a Rust frontend for GCC, has made progress toward compiling the Linux kernel, resolving issues in attribute handling, name resolution, and resource management, and reorganizing development milestones.
BPF programs can now send network packets directly from kernel space using the netpoll infrastructure, removing the need for a user-space agent and improving resilience for security monitoring tools like Tetragon.
Qualys and Anthropic disclose CVE-2026-64600, a race condition in the Linux kernel's XFS filesystem that allows local privilege escalation to root, affecting over 16 million systems, with no kernel log output and survival across reboots.
The Linux kernel is set to support $ORIGIN for relocatable binaries via eBPF and binfmt_misc, enabling Nix and similar tools to select interpreters programmatically.
This article details the discovery and exploitation of a Linux kernel 0-day vulnerability in the network scheduler subsystem (red scheduler), turning a limited slab use-after-free into full physical memory read/write, ultimately achieving privilege escalation to root. The vulnerability existed for 2.5 years and was fixed in June 2026.
Linux kernel patches introduce KNOD, a mechanism for in-kernel network packet offloading directly to AMD GPUs, enabling accelerated packet processing without user-space dependencies like ROCm. The code manages GPU queues, JIT compiles per-packet programs, and dispatches work entirely from the kernel.
Researchers at Basis used LLMs to formally verify Linux's nftables firewall, discovering two critical bugs affecting all versions since 2022 and producing a verified implementation free of those bugs.
Linus Torvalds defends the use of AI-powered coding tools in the Linux kernel, telling critics to 'fork it or walk away.' He rejects anti-AI absolutism in the open source community.
Linus Torvalds reaffirms that the Linux kernel project is not anti-AI, stating that AI/LLMs are useful tools and that he will not tolerate attacks on developers who use them.
The article criticizes Anubis, an HTTP proof-of-work proxy meant to block AI scrapers, showing it is trivially bypassed by AI while imposing a regressive burden on human users, especially those with weak devices or non-JavaScript browsers.
GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel stack use-after-free vulnerability affecting all distributions, allowing local privilege escalation and container escape. Detailed exploitation techniques are presented.
A Linux kernel zero-day vulnerability (CVE-2026-43456) rooted in code from 2007 was discovered by Yuki Koike and Kota Toda, rewarded over $80,000 via Google's kernelCTF. The flaw, a type confusion in the net/bonding subsystem, allows reliable privilege escalation within one second.
Bad Epoll (CVE-2026-46242) is a race-condition use-after-free vulnerability in the Linux kernel's epoll subsystem that allows unprivileged users to escalate to root on both Linux and Android devices. It was reported by Jaeyoung Chung and was missed by Anthropic's Mythos AI.
This blog post explains why PostgreSQL databases are vulnerable to OOM killer and how using strict memory overcommit can prevent catastrophic outages. It also discusses a kernel bug and heuristics for setting the proper overcommit limit.
PostgreSQL 19 introduces kernel asynchronous reads via io_uring, enabling direct asynchronous buffered I/O for improved performance without dedicated worker processes.
A vulnerability in the Linux kernel's FUSE readdir cache (CVE-2026-31694) allows unprivileged local users to escalate to root via an out-of-bounds write. The bug affects many desktop distributions and can be exploited by mounting a FUSE filesystem.