linuxsecurity.com / .linuxsecurity-com-linuxsecurity-features / Page 4

A Linux eBPF security race can leave generated kernel code pointing at a BPF program after that program's memory has been released.

A cgroup namespace gives a Linux process a limited view of the control-group hierarchy that organizes workloads and accounts for resources.

A Linux device driver can keep an open file alive while freeing the hardware state that file still needs.

Linux integrity checks depend on more than a correct policy or a trusted hash. The kernel must also keep that security state alive for the entire decision. A new patch series reports two places where Integrity Policy Enforcement could continue ...

A newly merged Linux HID fix addresses a Wacom input-device path that could read beyond a short report and pass a value to local software.

Linux DAMON, the kernel's Data Access Monitor, samples memory use to show which pages a workload touches.

A live Linux distribution runs from removable media, usually a USB drive, without requiring a permanent installation.

The crun container runtime has changed how GPU-enabled workloads launch a key graphics helper.

Linux developers have fixed two memory-safety bugs in the subsystem that lets hardware move data without constant help from the CPU.

Linux developers have fixed two input-system bugs that could expose small pieces of leftover kernel memory to a local program.