linuxsecurity.com / .linuxsecurity-com-linuxsecurity-articles / Page 2

Linux kernel vulnerability news dominated the security updates published from August 20 through August 27. Ubuntu, Debian, Fedora, Mageia, Oracle Linux, Rocky Linux, SUSE, and openSUSE released fixes for standard kernels, cloud kernels, real-time ...

A Linux security hook should be able to check a task without invalidating the identity data that surrounding kernel code is still using. AppArmor broke that expectation when a policy update made the task's current label stale: code inside widely used ...

Linus Torvalds merged a Linux NFS client update on Aug 26, 2026, that includes a fix for rpc_pipefs files left attached to an RPC client after the client object was freed. Opening one of those leftover files could trigger a kernel use-after-free.

The Linux IPMI maintainer accepted a patch on Aug 26, 2026 that restores an RCU grace period before command-receiver objects are freed. The one-line change addresses a use-after-free condition in the kernel's Intelligent Platform Management Interface ...

A Linux uevent can carry bytes from freed kernel memory when one object survives longer than the allocation behind its name. A new Synaptics RMI4 patch demonstrates that path during device removal and a probe failure.

A Linux system can be hardened, monitored, and carefully administered while still receiving untrusted code through a package, dependency, container image, build runner, or deployment pipeline. The risk often begins before the software reaches the ...

An alert suggests that a Linux server may be compromised. The first impulse is often to reboot it, stop a process, delete a suspicious file, or patch the visible weakness. During Linux incident response, those actions can erase the evidence needed to ...

A Linux dm-integrity patch posted on Aug 24, 2026 targets a writeback race that can leave stored data with the wrong integrity tag after a crash. Chen Cheng proposed requiring stable writes when dm-integrity generates internal hashes in direct, ...

Linux RDS can accept a path count that is larger than the storage allocated for an InfiniBand connection. A peer on the same Remote Direct Memory Access, or RDMA, fabric can then make receive-side kernel code walk beyond that allocation, producing an ...

Linux hardening is not the act of enabling every restrictive setting a distribution provides. It is the work of reducing unnecessary exposure, limiting what users and processes can do, separating workloads, and confirming that those controls remain . ...