#linux
-
Zapscape: KVM Vulnerability Lets Attackers Escape a Guest VM onto the Linux Host
A new bug in KVM/x86's shadow MMU (CVE-2026-64561) lets privileged code inside a nested virtual machine run commands on the host as root. The risk applies to systems running nested virtualization exposed to untrusted guests.
-
Interrupt Injection: A Precisely Timed Interrupt Slips Past Spectre v2 Defenses
MIT CSAIL researchers have shown that an unprivileged program on Linux can wedge itself into the gap between the moment the branch predictor is cleared and the moment the kernel uses it — re-“poisoning” it and bypassing the standard mitigations against Spectre v2.
-
Zbtlink Routers Ship with a Factory Backdoor That Opens Passwordless Root Access
Researchers at VulnCheck have found a built-in backdoor in every firmware image from Chinese manufacturer Zbtlink: it hands an attacker an interactive root shell without any authentication whatsoever.
-
Mesa 26.2 Released: Mesh Shaders in NVK and a Host of Vulkan Improvements
The latest quarterly release of the open-source OpenGL and Vulkan driver stack for Linux is out. The focus is once again on Vulkan, but Zink, Rusticl and even the old Radeon drivers got some attention too.
-
OVSwrap: a Linux kernel flaw hands local users root through Open vSwitch
A memory-corruption bug in the Open vSwitch datapath lets an ordinary user gain root on a wide range of distributions in their default configuration. The public exploit ships with ready-made data for roughly 800 kernel builds.
-
AMD Proposes an eSPI Subsystem for the Linux Kernel
AMD has published patches introducing a new subsystem for the eSPI interface into the Linux kernel, along with a driver for its own hardware.
-
The Linux Staging Subsystem Will Reject LLM Patches — Except for Genuine Security Fixes
Greg Kroah-Hartman has announced that the kernel's drivers/staging/ subtree will no longer accept patches generated by language models. The one exception: truly valid vulnerability fixes that have been verified on real hardware.
-
Critical cPanel Vulnerability: A Hosting Customer Could Run SQL as the Database Root
cPanel has patched CVE-2026-58048 (CVSS 9.4), which let a hosting account holder execute arbitrary SQL commands with administrative privileges. The same release fixes two more flaws that broke through account boundaries.
-
Rust wants to get rid of Pin: immovable types and guaranteed destructors
The Rust team has adopted a project goal for 2026–2027: to introduce the Move and Forget traits, which would let types opt out of being moved and “forgotten.” This should simplify working with self-referential types and, eventually, fully supplant the Pin mechanism.
-
Shitty: a terminal with a dumb name and serious ambitions
The author, pg83, has unveiled Shitty — a terminal emulator that, judging by the benchmarks, outpaces alacritty, kitty and ghostty, while openly admitting to being “memory-unsafe.”
-
Linux on a Calculator: How the HP Prime G2 Was Taught to Run X11 and Doom
Engineer Remy van Elst has updated the Linux port for the HP Prime G2 graphing calculator — complete with a working keyboard, touchscreen, an X server and, of course, Doom.
-
GNOME Introduces an RFC Process and Battles a Flood of AI Extensions
The GNOME project closed out July working on a formal RFC process to govern its development while simultaneously fighting off a surge of sloppy, neural-network-generated GNOME Shell extensions.
-
Arch Linux Veteran Morten Linderud Leaves the Project After 10 Years
Developer, security team member and maintainer of numerous packages Morten “Foxboron” Linderud has announced his departure from Arch Linux, leaving a number of key packages without a maintainer.
-
Arch Linux Disables Adoption of “Orphaned” AUR Packages After Attacks
The Arch Linux DevOps team has temporarily banned the adoption of orphaned packages in the AUR: attackers were seizing them en masse and planting a remote access trojan.
-
Linux 7.3 to Enable Intel Nova Lake S Graphics by Default
In the upcoming Linux 7.3 kernel, the integrated graphics of Intel's Nova Lake S processors will be deemed stable and work “out of the box” — well ahead of the chips themselves, which are expected in early 2027.
-
ARCTIC Ships a Fan Controller with Ready-Made Linux Kernel Support
ARCTIC has not only released an inexpensive 10-channel fan controller, but also prepared an open-source driver for it in advance—one that has already landed in the mainline Linux kernel.
-
gccrs learns to build the Linux kernel: results of the first half of 2026
The gccrs project, which is developing a Rust frontend for GCC, spent the first half of 2026 working on compiling the Linux kernel — and made notable progress toward generating correct code.
-
Tengu Botnet Reboots Linux Devices When Defenders Kill Its Process
A new Mirai-based botnet abuses the hardware watchdog: kill its main process and the infected device reboots, giving the malware a chance to start up all over again.
-
Critical DHCPv6 Vulnerability in OpenWrt Opens the Door to Code Execution with Root Privileges
OpenWrt has shipped version 24.10.8, closing a critical stack overflow in odhcpd (CVE-2026-53921, CVSS 9.8) along with a number of other vulnerabilities in network services enabled by default.
-
STAR Labs Turned a Race Condition in Linux's Traffic-Control Subsystem Into a Root Exploit With the Help of AI
Researcher Li Jia Jie says artificial intelligence helped him find a use-after-free vulnerability (CVE-2026-53264) and speed up the development of an exploit that grants a local user root privileges.
- More