Linux news

A new open-source tool called Bor lets IT and security teams centrally manage fleets of Linux desktops. It uses a modern architecture to enforce policies for browsers, package management, and system settings in real time.

The technology eBPF allows developers to safely run custom programs inside the Linux kernel. This provides deep system visibility for performance and security monitoring without the risks or slow update cycles of traditional methods.

AMD has reinstated Linux support for the free version of its Vivado design suite. This move reverses an earlier, unpopular decision and is a welcome update for hardware and embedded systems engineers who rely on Linux for developing with FPGAs and adaptive SoCs.

Ubuntu has released a security update for its 20.04 LTS version, addressing a vulnerability in the xdg-dbus-proxy component. The flaw could allow a local attacker to intercept certain D-Bus messages by exploiting incorrect handling of policy rules. Users are advised to apply the patch promptly.

Ubuntu has patched a critical vulnerability in its GDK-PixBuf image library. A specially crafted JPEG file could crash an application, cause a denial of service, or even allow an attacker to execute arbitrary code on affected systems.

A security flaw has been found in a core audio library on Ubuntu 20.04 LTS. Attackers could exploit it with a special file to crash applications or potentially run malicious code, requiring an immediate system update.

A vulnerability was discovered in Ubuntu's System Security Services Daemon (SSSD). A local attacker can exploit this by sending malformed data to the PAM passkey responder, causing it to crash. This results in a denial of service, preventing users from authenticating on affected systems.

Ubuntu has released security updates for the Linux kernel. The patches address several vulnerabilities, including a critical flaw known as 'Copy Fail' that could allow a local attacker to gain higher privileges or escape from a container environment. All users should update their systems promptly.

A security vulnerability has been discovered in libeconf, a configuration file parsing library used in Linux environments. The flaw could allow an attacker to cause a crash by sending improperly sized input, resulting in a denial of service. Ubuntu has issued a patch to address the issue.

This week's security landscape saw several critical developments. A new vulnerability was discovered in the Linux kernel, while a significant exploit targeted Palo Alto Networks' PAN-OS. Additionally, the use of AI in crafting sophisticated attacks is on the rise, alongside new OAuth-based phishing campaigns.

Multiple vulnerabilities have been discovered in the Linux kernel, including a critical flaw known as 'Copy Fail'. This specific issue could allow a local attacker to gain higher privileges or escape from a container, potentially leading to a full system compromise. The update addresses these security risks.

Ubuntu has patched a security vulnerability in the Linux kernel's packet socket subsystem. The flaw could allow an attacker to compromise affected systems, posing a risk to enterprise and government users running FIPS-certified versions.

A public exploit is now available for a recently patched Arch Linux vulnerability called PinTheft. The flaw allows a local attacker to gain full root privileges on a system. The vulnerability has already been fixed, so users who have updated their systems are protected from this exploit.

California lawmakers are amending a new age-verification law to exempt Linux and other open-source operating systems. The original bill's broad language could have required OS developers to verify user ages, sparking significant backlash from the open-source community over feasibility and potential harm.

A security vulnerability has been patched in Evolution Data Server for Ubuntu 18.04 and 20.04 LTS. The flaw could allow an attacker to delete arbitrary files on the system by exploiting how the server handles its local cache. Updating is recommended to protect system integrity.

A significant vulnerability has been found in the OverlayFS component of Ubuntu's Linux kernel, specifically affecting versions used on Google Cloud Platform. The flaw could allow a local attacker to bypass permission checks and gain elevated system privileges, posing a serious security risk for affected servers.

A critical vulnerability, dubbed 'Copy Fail,' has been discovered in the Linux kernel for Google Cloud Platform. The flaw allows local attackers to escalate privileges or escape containers. Several other security issues were also patched, which could have allowed system compromise. Users should update their systems immediately.

Two vulnerabilities have been discovered in the Foomuuri firewall tool. The flaws allow a local, unprivileged attacker to bypass security measures and manipulate firewall configurations. The issues stem from improper authorization and validation within Foomuuri's D-Bus service, creating a significant privilege escalation risk.

Ubuntu has released a security update addressing several vulnerabilities discovered in the Linux kernel. The flaws affect various subsystems, including ARM64 and x86 architectures, drivers, and core frameworks. An attacker could potentially exploit these issues to compromise a system, making the update essential for users.

Ubuntu has patched high-severity vulnerabilities in the Linux kernel for NVIDIA Tegra systems. The flaws, including one known as 'Copy Fail,' could allow a local attacker to gain higher privileges or potentially escape from a container, posing a significant risk to affected infrastructure.

Ubuntu has released a new patch for its CUPS printing system. This fixes a denial-of-service bug that was accidentally introduced by a critical security update just days earlier, highlighting the risks of patching.

A critical Linux kernel vulnerability, named 'Dirty Frag', allows local attackers to gain higher privileges or even escape containers. The flaw affects how the kernel handles network data, putting shared infrastructure at immediate risk.

This week's security landscape saw the discovery of new Linux vulnerabilities and a zero-day flaw in Microsoft Defender. The incidents highlight ongoing risks from unpatched systems and complex supply chains. Additionally, old bugs resurfaced, and phishing attacks have become more targeted, posing a continued threat.

A critical vulnerability has been patched in the `sed` utility on Ubuntu 18.04 LTS and 20.04 LTS. The flaw allowed a local attacker to overwrite arbitrary files by exploiting how `sed` handles symbolic links during in-place edits, potentially leading to privilege escalation on affected systems.

Multiple high-severity Linux kernel vulnerabilities have been discovered. A local attacker could exploit these flaws, known as 'Dirty Frag,' to gain full control of a system or even escape from a containerized environment to the host machine.

A new Linux kernel vulnerability called 'Dirty Frag' allows local attackers to gain higher privileges. This critical flaw could let malicious code escape from containers, posing a serious risk to cloud infrastructure and shared systems.

Ubuntu has patched several high-severity Linux kernel vulnerabilities affecting the NVIDIA Tegra IGX platform. The most critical flaw, known as "Copy Fail," could allow a local attacker to escalate privileges or escape a container, posing a significant risk for industrial and edge AI systems.

A new Linux kernel security patch has been released to address several vulnerabilities. The update fixes critical flaws, including one that could allow for privilege escalation and another that could lead to a container escape, posing a significant risk to system integrity and data security.

Two critical vulnerabilities in systemd, a core Linux component, could allow attackers to escape containers or manipulate DNS records. The flaws affect widely used distributions, including Ubuntu 22.04 LTS.

A critical vulnerability, known as Copy Fail, has been found in the Linux kernel for Azure. The flaw affects cryptographic operations and could allow a local attacker to gain higher privileges or escape from a container, posing a significant security risk for cloud-based applications and infrastructure.

Ubuntu has released a security update for the Linux kernel to address several critical vulnerabilities. The flaws affect core subsystems, including Netfilter, io_uring, and the SMB file system. An attacker could potentially exploit these issues to compromise an affected system, making patching essential for security.

A critical security update has been released for the Azure-specific Linux kernel. The update addresses several vulnerabilities, including a major flaw (CVE-2026-31431) that could allow an attacker to gain higher privileges or escape from a container. Teams operating on Azure should apply the patch immediately.

Ubuntu has released a security update for the Linux kernel, specifically for NVIDIA Tegra systems. The patch addresses multiple vulnerabilities across various subsystems, including ARM64 and x86 architectures, drivers, and the DMA engine. These flaws could allow an attacker to compromise an affected system.

Multiple critical vulnerabilities have been discovered in the Linux kernel. The flaws, known as "Copy Fail" and "Dirt," affect cryptographic and socket buffer operations. Attackers could exploit these issues to gain higher privileges on a system or escape from containerized environments, posing a significant security risk.

A significant security vulnerability has been identified in XZ Utils, a common data compression utility. The flaw stems from improper memory management, which could allow an attacker to crash the software, causing a denial of service, or potentially execute arbitrary code on affected systems.

Ubuntu has released a security update for the Linux kernel, addressing multiple vulnerabilities. The most critical flaw, named "Copy Fail," could allow a local attacker to gain higher privileges or even escape from a container, posing a significant risk to system integrity and multi-tenant environments.

Multiple high-severity vulnerabilities, collectively called Dirty Frag, have been found in the Linux kernel. The flaws exist in how the kernel handles shared memory for network operations. A local attacker could exploit these to gain higher privileges on a system or potentially escape from a container.

Security researchers have found several critical vulnerabilities in the Linux kernel, collectively known as "Dirty Frag." These flaws affect how the kernel handles network data and could allow a local attacker to gain higher privileges or even escape from a container, posing a significant security risk.

Ubuntu has patched several critical vulnerabilities in the Linux kernel. One major flaw, dubbed 'Copy Fail,' affects the kernel's cryptography module and could allow a local attacker to gain higher privileges on a system or escape from a container, posing a significant security risk.

Multiple critical security flaws have been found in CUPS, the printing system used by Linux and macOS. Attackers could remotely overwrite files or gain unauthorized access, making immediate patching essential for system security.

Ubuntu has released a security notice for multiple vulnerabilities in the Linux kernel. A key flaw, known as "Copy Fail," affects cryptographic operations and could allow a local attacker to escalate privileges or escape from a container. The update addresses this and several other security issues.

A high-severity vulnerability (CVE-2026-31504) has been found in the Linux kernel's packet sockets subsystem. The flaw could allow a remote attacker to compromise an affected system. Security updates are now available from major distributions and should be applied immediately to mitigate the risk.

Security researchers found critical vulnerabilities in the Azure-specific Linux kernel. These flaws could allow a local attacker to gain higher privileges or even break out of a container, posing a serious risk to cloud infrastructure security.

Multiple vulnerabilities have been found in the Linux kernel, including a critical flaw known as 'Copy Fail'. This specific issue could allow a local attacker to gain higher privileges or even escape from a container, posing a significant risk to system security. An update is available.

California lawmakers are proposing an amendment to an upcoming age-verification law. The change would exempt most open-source operating systems, including major Linux distributions, following criticism from privacy advocates who warned the original rules would force decentralized projects to collect user data.

AMD is updating its Vivado FPGA development tool. Starting with the 2026.1 release, the free version will support more devices but will no longer be available on Linux, forcing developers to use a paid version for future updates.

Multiple security vulnerabilities have been discovered in the Linux kernel, affecting its cryptographic API and packet sockets. A significant flaw, dubbed "Copy Fail," could allow a local attacker to escalate privileges or even escape a container, potentially leading to a full system compromise. An update has been released.

Microsoft has officially released Azure Linux 4.0, its first server-grade Linux distribution. The new OS is designed for cloud environments and can be run on Azure infrastructure or locally on desktops using the Windows Subsystem for Linux, marking a significant step for the company.

Ubuntu has issued a security notice for multiple vulnerabilities discovered in the Linux kernel. The flaws affect key subsystems, including network drivers and the BTRFS file system. An attacker could potentially exploit these issues to compromise a system, making immediate updates essential for all affected users.

Ubuntu has released a security update for the Linux kernel used in NVIDIA Tegra systems. The update addresses several vulnerabilities in network drivers, NVME drivers, and Netfilter that could allow an attacker to compromise an affected system. Applying the patch is recommended for all users.

A new Linux kernel vulnerability named "Dirty Frag" has been found in versions 4.10 and later. It allows for local privilege escalation by combining two previously known flaws. The issue is in the IP packet fragmentation system and was publicly disclosed on May 7, 2026.

Ubuntu has patched several Linux kernel vulnerabilities, including two in its OverlayFS file system. These flaws could allow a local attacker to bypass permission checks and gain elevated privileges, potentially leading to unauthorized system control. Users should update their systems immediately to mitigate the risk.

A nine-year-old vulnerability (CVE-2026-46333) has been found in the Linux kernel. The flaw, caused by improper privilege management, allows a local user without special permissions to access sensitive files and execute commands with root privileges on default installations of several major Linux distributions.

Ubuntu has released security updates for the Linux kernel on Xilinx ZynqMP systems. These patches address multiple vulnerabilities, including critical flaws in the OverlayFS implementation that could allow a local attacker to gain elevated privileges and compromise the security of affected devices.

Ubuntu has issued a security notice detailing several vulnerabilities discovered in the Linux kernel. The flaws affect network drivers, NVME drivers, and IPv4 networking subsystems. An attacker could potentially exploit these issues to compromise a system, making the provided security update essential for all users.

Proof-of-concept exploit code, named DirtyDecrypt, has been publicly released for a recently patched Linux kernel vulnerability. The flaw allows for local privilege escalation, enabling an attacker with local access to gain higher-level system permissions. The vulnerability was discovered and reported by security researchers in early May.

Ubuntu has patched several vulnerabilities in the Linux kernel. One major flaw, known as 'Copy Fail,' could allow a local attacker to escalate privileges or escape a container. Other issues were found in subsystems like networking, cryptography, and I/O, which could also lead to system compromise.

Ubuntu has released a security update for the Linux kernel, fixing several vulnerabilities. The most critical flaw, known as Copy Fail, could allow a local attacker to escalate privileges or escape from a container. The patch also addresses issues in various other kernel subsystems to prevent system compromise.

A new Linux malware named Showboat has been discovered targeting a telecommunications provider in the Middle East. Active since at least mid-2022, Showboat is a modular post-exploitation tool. It can create a remote shell, transfer files, and establish a SOCKS5 proxy for attackers to use.

A proof-of-concept exploit is now public for a high-severity Linux kernel vulnerability dubbed 'DirtyDecrypt.' The flaw allows a local user to gain root privileges on systems with the `rxgk` module enabled. Major distributions are affected, and patches are available. Teams should update their systems immediately.