#Linux kernel

9 tutorials tagged with "Linux kernel"

USN-8920-1 Is a 5.4 Kernel. The OEM Fix Is Not.

USN-8920-1 is a 5.4 kernel for 20.04 and 18.04. The 6.17 OEM fix is USN-8911-1. The three October notices do not share a CVE.

linux

Debian's 1,313 Kernel CVEs Are a Batch, Not 1,313 Fires

Debian 13's Sept. 29 kernel update fixes 1,313 CVEs in 6.12.111-1. Ubuntu's USN-8816-4 is a 101-CVE GKE backlog. Reboot, then check freerdp.

security

ZcopyReaper Is in RDS Zerocopy. User Namespaces Will Not Save You

CVE-2026-43502 is a local root in the RDS zerocopy path, present since Linux 4.17. Mainline fix is 7.1-rc3. Ubuntu lists 7.0.0-28, 6.8.0-136, and 5.15.0-186. Restricting user namespaces does nothing.

security

Zapscape (CVE-2026-64561): The KVM Vulnerability That Lets Attackers Escape Your VM

A critical KVM vulnerability allows attackers to break out of virtual machines and take control of the host. Here's what it is, who's affected, and how to fix it.

security

GhostLock CVE-2026-43499: 15-Year-Old Linux Root Exploit

GhostLock (CVE-2026-43499) is a use-after-free vulnerability in the Linux kernel that sat undetected for 15 years, allowing any local user to escalate to root with 97% reliability. Here's how to check and patch your servers.

security

Bad Epoll: New Linux Kernel Flaw Lets Unprivileged Users Grab Root — and Android Is Affected Too

A race condition in the Linux kernel's epoll subsystem allows local privilege escalation to root. Servers, desktops, and Android devices are all vulnerable. Here's what to patch and how to check if you're exposed.

linux

DirtyClone (CVE-2026-43503): What Linux Admins Need to Know and How to Mitigate Right Now

A newly disclosed kernel vulnerability in the packet cloning subsystem affects every major Linux distribution running kernel 6.1 through 6.12. Here's a practical mitigation guide with step-by-step instructions for Ubuntu, Debian, RHEL, and containerized environments.

security

PinTheft CVE-2026-43494: Linux Kernel Privilege Escalation — What Server Admins Must Know

A deep dive into the PinTheft vulnerability (CVE-2026-43494) that grants local root access through a chain of bugs in the Linux kernel's RDS and io_uring subsystems. Learn how to detect exposure, apply patches, and harden your servers.

security

Linux Kernel Drops strncpy After Six Years: What Server Admins Need to Know

Linux 7.2 finally removes the decades-old strncpy API after 360+ patches. Here's why this matters for your servers and what you should check before upgrading.

linux