#linux
-
Critical PwnEscape Flaw in Linux Kernel Lets Guest VMs Read Host Memory
A critical bug in the Linux kernel's networking code lets code inside a virtual machine read the host's memory. The leak was demonstrated against Vercel's live cloud sandboxes.
-
Fake Arch Linux packages delivered root-level malware
A threat actor uploaded AUR packages posing as the popular yay and paru helpers, bundling legitimate code with a malicious script that ran with root privileges.
-
Seven stable kernels patch a critical flaw in the Linux network stack
Greg Kroah-Hartman has released stable kernel updates across seven branches at once. Among the fixes is a critical vulnerability in skb_checksum_help() tied to how IPv4 checksums are handled.
-
Microsoft Ships Defender for the Linux Desktop
Microsoft's Defender anti-threat product now runs on desktop Linux too — the company points to a growing number of developers who pick Linux as their working machine.
-
Ubuntu 26.10 "Stonking Stingray" Lands With Linux 7.3, GNOME 51 and a Finished Rust Coreutils Switch
Canonical has shipped its latest six-month, non-LTS release. The headline changes are a fresh kernel, the GNOME 51 desktop and the fully completed move to Rust-based core utilities.
-
Epic is bringing Fortnite to Linux and rebuilding its anti-cheat
Epic is rebuilding Easy Anti-Cheat so Fortnite can finally run on Linux. There's no timeline yet, but a new launcher is already shipping in preview — on Linux for the first time.
-
KDE Plasma 6.8 Released as the KDE Project Turns 30
The KDE team has shipped Plasma 6.8, its latest desktop release. The launch coincides with the 30th anniversary of the KDE project.
-
Vghost: Linux kernel bug hands local users root and lets a guest break out to the host
A flaw in the vhost subsystem let a local user read and write kernel memory and become root for almost nine years, and in one virtualization setup let an untrusted VM break out to the host. The bug was found by Tencent's AI pipeline.
-
Nix and Lix patch local root privilege-escalation flaws
The Nix and Lix projects have jointly disclosed a set of vulnerabilities that allow escalation to root on systems running the Nix or Lix daemons. Fixed releases are already available.
-
FreeType 2.15 Released With Apple HVF Driver and ISO Open Font Format Edition 5
A new release of the widely used font rendering library FreeType is out, adding an Apple HVF driver and support for the fifth edition of the ISO Open Font Format.
-
ESP32 As a Wireless Co-processor: Turning a Cheap Espressif Module Into a Linux Wi-Fi Card
The esp-hosted project lets you hang a cheap ESP32 off a single-board computer over SDIO or SPI and get Wi-Fi and Bluetooth backed by partly open firmware — instead of an all-blob proprietary card.
-
Codex CLI quietly installs a self-updating background daemon
Starting with version 0.157.0, OpenAI's tool spins up a persistent background process on first launch that copies itself and updates without the user's knowledge. The community is comparing the behavior to malware.
-
Linux 7.3-rc7 Is Out, Stable Kernel Expected Next Sunday
Linus Torvalds has published what is hopefully the final release candidate ahead of Linux 7.3. If all goes to plan, the stable kernel should arrive next Sunday.
-
Linus Torvalds Turns to Claude Code for Linux Kernel Work
Linux creator Linus Torvalds is leaning further into AI tooling — he is now using Claude Code to work on new kernel features.
-
The tilde in your PATH may not be your home
A developer found that `export PATH="$PATH:~/.local/bin/"` in quotes does not expand the tilde to your home directory — and showed why that matters.
-
Drgn 0.3: Meta's Programmable Debugger Gets an Update
Meta has released version 0.3 of its open-source debugger Drgn, which bets on programmability — treating debugging like writing ordinary code.
-
LineageOS 24.0 Arrives on Android 17, Just Shy of a Decade
The LineageOS team has shipped version 24.0 based on Android 17 — and, unusually, ahead of schedule. Highlights include browser-based flashing tools, refreshed apps, and an experimental build for desktop hardware.
-
AI Agent Resources Proposed for the Linux Kernel
A new proposal for the upstream Linux kernel introduces "resources" for AI agents. The first such skill would automatically add a "Fixes:" tag to patches.
-
Anthropic launches free AI security scans for open-source projects
The new OSS Scanner service promises opted-in projects regular checks by the company's "strongest models." The catch: its reports come with no human review.
-
Ubuntu Website Down Amid Sustained DDoS Attack
The official Ubuntu website, ISO downloads, and related resources have become unavailable amid a confirmed, ongoing distributed denial-of-service attack.
- More