linuxsecurity.com / .linuxsecurity-com-linuxsecurity-features / Page 5

Linux developers have fixed an SELinux flaw that could allow a program to make a mapped file executable after SELinux had blocked direct execution.

Most administrators do not think about BIND, browser engines, or cloud kernels until one of them fails.

Linux packet metadata could keep pointing to network headers after the underlying packet had been rebuilt without them.

A Linux eBPF security flaw could cause the kernel to approve a program using an incorrect understanding of the values it would process.

A PowerPC KVM use-after-free could leave the Linux host kernel accessing a nested-guest object after another virtual CPU caused that object to be removed and freed. The upstream Linux correction adds a missing reference that keeps the object alive .. ...